CVE-2026-115791

When tarfile or zipfile command line interface CLI is used to decompress an archive, a Python script shadowing the stdlib can be created. Then if an error occurs during decompressing the next file, the newly created Python script is executed. This is especially true if the created Python is calle...

CVE-2026-115791: Python Software Foundation CPython: When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the…

When tarfile or zipfile command line interface CLI is used to decompress an archive, a Python script shadowing the stdlib can be created. Then if an error occurs during decompressing the next file, the newly created Python script is executed. This is especially true if the created Python is calle...