Live › vulnerability › CVE-2026-119704
Bastille, a FreeBSD jail management tool, has a symlink-following flaw in its cp.sh, rcp.sh and jcp.sh subcommands. A user inside a jail can plant symlinks that make administrator-run copies overwrite or read host files as root.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Hosts running Bastille 1.4.4 or earlier that have jails where untrusted users have access, and where administrators run the cp, rcp or jcp subcommands. Systems without Bastille, or without multi-user jails, are not exposed through this flaw.
No product ranges from the sources yet.
bastille version and compare it to the fixed release.1.4.4 are affected; the sources do not name a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Bastille through 1.4.4 contains a symlink following vulnerability in the cp.sh, rcp.sh and jcp.sh subcommands that allows jailed users to escape jail isolation. Attackers inside a jail can plant symlinks pointing to host paths or other jail roots, so administrator-run copies overwrite or read host files with root privileges.
This page as .md · .json · in your agent: get_signal("CVE-2026-119704")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.