CVE-2026-19672

creationtimestamp| type| source ---|---|--- 2026-08-25 23:57:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3crxac6rksuqk...

Linux Distros Unpatched Vulnerability : CVE-2026-19672

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it...

UBUNTU-CVE-2026-19672

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...

CVE-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination

The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name...