Boxlite, a sandbox service that executes OCI containers, contains a path traversal flaw caused by its lack of validation for absolute symlink entries in tar files. The vulnerability enables an attacker to craft a malicious OCI image that, when loaded, writes arbitrary files to any location on the host system. This file overwrite capability can lead to execution of arbitrary code on the host, compromising confidentiality, integrity, and availability.

The affected results from Boxlite versions prior to 0.9.0. Users employing older releases of the boxlite package are susceptible when they load OCI images from external registries such as DockerHub.

The flaw has a CVSS score of 9.6, indicating a high severity. The EPSS score is not available, but the lack of listing in CISA KEV suggests that exploit instances have not yet been observed in the wild. Attackers can simply supply a malicious OCI image, making the vector likely to be a supply‑chain or user‑initiated container launch. Any affected deployment is at serious risk of unauthorized code execution if the vulnerability remains unpatched.