Read the docs
TI-2026-29768 Aliases CVE-2026-41140GHSA-73h3-mf4w-8647

Poetry: Path traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4

Priority LOW 5CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
Present
Impact type
—
Confidentiality · integrity · availability
None · Low · None
Fix status
Partial Red Hat: 1 fixed, 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat.

Summary

Poetry is a dependency manager for Python. Prior to 2.3.4, the extractall() function in src/poetry/utils/helpers.py:410-426 extracts sdist tarballs without path traversal protection on Python versions where tarfile.data_filter is unavailable. Considering only Python versions which are still supported by Poetry, these are 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4. This vulnerability is fixed in 2.3.4.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00294 22nd percentileScored 2026-11-07
Fix Partial poetry (python-poetry): 2.3.4poetry (PyPI): 2.3.4Red Hat: 1 advisoryRed Hat: 1 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
python-poetrypoetrybefore 2.3.42.3.4Patch availableCNA
—poetry (PyPI)before 2.3.42.3.4Patch availableGHSA-73h3-mf4w-8647
  • poetry Vendorpython-poetry Affected before 2.3.4 Fixed in 2.3.4 Patch available CNA
  • poetry (PyPI) Vendor— Affected before 2.3.4 Fixed in 2.3.4 Patch available GHSA-73h3-mf4w-8647

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:python-poetry:poetry:*:*:*:*:*:*:*:*——python-poetry
  • cpe:2.3:a:python-poetry:poetry:*:*:*:*:*:*:*:* Versions — — ·python-poetry

Remediation

  • Fix · CNA poetry (python-poetry) Fixed in 2.3.4
  • Fix · GHSA-73h3-mf4w-8647 poetry (PyPI) Fixed in 2.3.4 Advisory →

Red Hat 1 advisory

  • RHSA-2026:24866 Released 2026-06-09 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9 +7

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:24866
Not affected: 5 products
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Container Platform 4
  • Red Hat Satellite 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-41140
  2. 2026-10-03 Alias added: GHSA-73h3-mf4w-8647

References

Advisory 1

Other 3

  • TI-2022-16492 Poetry Argument Injection vulnerability can lead to local Code Execution CVSS 3.1HIGH 7.3
  • TI-2022-20946 Exponential ReDoS in cleo leads to denial of service CVSS 3.1HIGH 7.5
  • TI-2026-26838 Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write CVSS 4.0HIGH 7.1
  • TI-2022-09621 Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes… CVSS 3.1CRITICAL 9.8
  • TI-2022-16493 Poetry's Untrusted Search Path can lead to Local Code Execution on Windows CVSS 3.1HIGH 7.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences