Exploit for CVE-2025-4517

🗓️ 15 Feb 2026 12:27:52Reported by StealthByte0Type

githubexploit🔗 github.com👁 304 Views

CVE-2025-4517: Python tarfile allows arbitrary writes during extraction via data or tar filters.

Reporter	Title	Published	Views	Family All 371
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in Python [CVE-2025-4517]	17 Dec 202514:16	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulnerabilities in IBM Spectrum Symphony with Requests and urlib3	23 Oct 202520:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Defender: Data Protect critical vulnerabilities resolved in release Defender 2.1.0/Data Protect 7.3	10 Dec 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is affected by arbitrary code execution (CVE-2025-47273, CVE-2025-4330, CVE-2024-12718, CVE-2025-4138, CVE-2025-4517) due to Python	20 Aug 202515:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc packages shipped with IBM CICS TX Standard.	12 Aug 202511:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities	11 Sep 202619:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities discovered in RedHat UBI as shipped with IBM Security Verify Directory Server Container	8 Aug 202517:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is vulnerable to Path Traversal in python	31 Jul 202514:16	–	ibm
GithubExploit	Exploit for CVE-2025-4517	15 Feb 202622:09	–	githubexploit
GithubExploit	HTB-WingData-Writeup	27 Apr 202615:17	–	githubexploit

15 Feb 2026 12:32Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.4

EPSS0.0143

SSVC

Python tarfile vulnerability arbitrary writes data filter tar filter path traversal security research