CVE-2026-118599 — epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension installation

The source describes an epiphany vulnerability in which hard links in a TAR-based .xpi can overwrite user files during WebExtension installation.