As cited
Copy frozen at (site build).
vulnerabilities
Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink
Python's tarfile module contains a vulnerability in its extraction filters that allows attackers to modify files and disclose content by exploiting hard links to symlinks during archive extraction. The flaw affects systems that use tarfile's filtering mechanisms when processing untrusted tar archives.
Why it matters: Python developers and systems that process tar archives from untrusted sources face potential file modification and information disclosure; patching or disabling tarfile extraction of untrusted archives is critical.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink
CVE-2026-82049 affects Python's tarfile extraction filters, which allow attackers to modify files and disclose content through hard link to symlink exploitation. The vulnerability carries a CVSS score of 8.4 under version 4.0 scoring.
Why it matters: Python developers and users who extract tar archives should review and apply any available patches to prevent unauthorized file modification and data disclosure on their systems.
- Source published
- First seen by Cybersecurity Tracker