CVE-2026-82049

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

CVE-2026-82049 tarfile extraction filters allow file modification and content disclosure via hard link to symlink

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

CVE-2026-82049

CPython 3.13 and earlier are affected by a vulnerability in the tarfile module's data and tar extraction filters . A crafted archive containing a hard link to a symbolic link can cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

EUVD-2026-77772

In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose...

MALW

CVE-2007-4559 - Exploit de Polemarch Exploit completamente funcional para el servidor Polemarch https://www.polemarch.org/, usando CVE-2007-4559, que permite: Inyección de un criptominero para monero usando TOR para mejor ocultación. Inyección de un rootkit dirigido a las herramientas de...

CVE-2026-87910

A flaw was found in the Python tarfile module. When extracting an archive containing a link on systems that do not support links, the module falls back to extracting the linked member. During this fallback, a security filter designed to prevent the extraction of certain files is not properly...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 是 Python tarfile 模块中的一个漏洞，允许在解压不受信任的 tar 归档文件时，在提取目录之外写入任意文件。该问题出现在使用 TarFile.extract 或 TarFile.extractall 并指定 filter="data" 或 filter="tar" 时，后者无法完全阻止通过精心构造的 tar 成员进行的路径遍历攻击。 Python 3.14 将默认提取过滤器更改为 "data"，因此依赖此默认值的应用程序也可能受到影响。虽然源代码分发的安装不受显著影响，但任何使用这些过滤器解压不受信任 tar...

CVE-2007-4559

CVE-2007-4559 的 PoC 或漏洞利用 恶意 TAR 压缩包可以包含像 ../../../../etc/passwd 这样的文件路径，试图“爬升”出预期的解压文件夹。 如果 Python 脚本使用了 tarfile.extract 或 extractall 而没有检查文件路径，它就会将文件解压到这些位置——即使它们指向目标目录之外。 这意味着黑客可以覆盖敏感或系统文件，尤其是当用户以提升的权限运行脚本时。 受影响系统 截至 2025 年，Debian 11–12 和 Ubuntu 24...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2025-4138

CVE-2025-4138 Python Tarfile 模块目录遍历漏洞，带溢出的跨目录 影响：权限提升 工作原理： Python 的 TarFile.extractall 和 TarFile.extract 方法支持设置过滤器以提高这些方法使用时的安全性。Python 标准库提供了两种实现 tarfilter "tar" 和 datafilter "data" ，各自具有不同的检查措施来提升 tar 文件提取的安全性。 当处理包含符号链接的路径时，如果该路径短于 PATHMAX ，但在通过 os.path.realpath 替换符号链接后长于 PATHMAX ，则存在一个漏洞。任何超...

Creosote

Creosote Creosote es nuestra solución para buscar la vulnerabilidad de tarfile descrita por CVE-2007-4559. La herramienta recorre recursivamente el directorio dado buscando archivos python. Cuando la herramienta encuentra archivos python, los escanea en busca del módulo tarfile y luego analiza el...

Linux Distros Unpatched Vulnerability : CVE-2026-87910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is...

DEBIAN-CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910 tarfile hardlink fallback ignores custom extraction filter rejection via None

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

EUVD-2026-76162

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

PSF-2026-40

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

CVE-2026-87910

CVE-2026-87910 affects Python's tarfile module. When extracting a hardlink on a system without link support, tarfile falls back to extracting the referenced member from the archive. During this fallback, the extraction filter function is invoked twice—once for the extracted member and once with t...