Parashells Crafted Appliance Archive Arginjection

Arnold Chan@slaz

•updated Sep 16, 2026•0•0•2

Detects a Parallels appliance tar archive containing a directory entry name with an embedded double-quote character followed by the --use-compress-program flag, characteristic of the ParaShells (CVE-2026-90894) tar argument-injection payload