CVE-2023-39810: Busybox

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

Affected products

• Busybox Busybox: version 1.30.1 only; version 1.33.2 only

Published 2023-08-28. Last modified 2026-07-09.