CVE-2026-46383

{
  "id": "CVE-2026-46383",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-15T17:16:49.090",
  "lastModified": "2026-10-26T14:10:00.130",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.13.0, Microsoft APM contains a Windows-specific archive extraction boundary failure in the legacy-bundle probe used by apm install <bundle> on supported Python 3.10 and 3.11 runtimes. When apm install is given a local .tar.gz that is not recognized as a plugin-format bundle, APM probes whether it is a legacy --format apm bundle. On Python versions earlier than 3.12, that probe extracts untrusted tar members with raw tar.extractall() without rejecting Windows absolute member names such as D:/.... This vulnerability is fixed in 0.13.0."
    },
    {
      "lang": "es",
      "value": "Microsoft APM es un gestor de dependencias de código abierto, impulsado por la comunidad, para agentes de IA. Antes de 0.13.0, Microsoft APM contiene una falla de límite en la extracción de archivos específica de Windows en la sonda de paquete heredado utilizada por apm install [bundle] en tiempos de ejecución de Python 3.10 y 3.11 compatibles. Cuando a apm install se le da un .tar.gz local que no es reconocido como un paquete con formato de plugin, APM sondea si es un paquete apm heredado con formato --format. En versiones de Python anteriores a la 3.12, esa sonda extrae miembros tar no confiables directamente con tar.extractall() sin rechazar nombres de miembros absolutos de Windows como D:/.... Esta vulnerabilidad está corregida en 0.13.0."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "microsoft",
          "product": "apm",
          "versions": [
            {
              "version": "< 0.13.0",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-15T17:48:40.768904Z",
          "id": "CVE-2026-46383",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        },
        {
          "lang": "en",
          "value": "CWE-73"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/microsoft/apm/security/advisories/GHSA-mq5j-pw29-jcv3",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/microsoft/apm/security/advisories/GHSA-mq5j-pw29-jcv3",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}