CVE-2026-82049

CPython 3.13 and earlier are affected by a vulnerability in the tarfile module's data and tar extraction filters . A crafted archive containing a hard link to a symbolic link can cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...