tarfile extraction filters allow file modification and content disclosure via hard link to symlink
Priority LOW 38CWE-59Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Passive
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.
Summary
In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link to a symbolic link. Such archives may cause extraction to modify the permissions or modification time of a file outside the destination directory, or expose the contents of that file within the extracted tree.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00188 8th percentileScored 2026-11-07
Fix Fixed CPython (Python Software Foundation): 3.10.22, 3.11.17, 3.12.15 +2Red Hat: 5 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Python Software Foundation | CPython | before 3.10.22; 3.11.0 to before 3.11.17; 3.12.0 to before 3.12.15; 3.13.0 to before 3.13.16; 3.14.0a1 to before 3.14.0b1 | 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.0b1 | Patch available | CNA |
- CPython VendorPython Software Foundation Affected before 3.10.22; 3.11.0 to before 3.11.17; 3.12.0 to before 3.12.15; 3.13.0 to before 3.13.16; 3.14.0a1 to before 3.14.0b1 Fixed in 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.0b1 Patch available CNA
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:python:python:*:*:*:*:*:*:*:* | — | — | python-pillow |
- cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions — — ·python-pillow
Remediation
- Fix · CNA CPython (Python Software Foundation) Fixed in 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.0b1
Red Hat 5 advisories
- RHSA-2026:68309 Released 2026-09-16 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images python3.13-3.13.15-1.3.hum1@aarch64, python3.13-3.13.15-1.3.hum1@src, python3.13-3.13.15-1.3.hum1@x86_64 +16
- RHSA-2026:68154 Released 2026-09-16 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images python3.12-3.12.14-1.3.hum1@aarch64, python3.12-3.12.14-1.3.hum1@src, python3.12-3.12.14-1.3.hum1@x86_64 +12
- RHSA-2026:68135 Released 2026-09-16 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images python3.11-3.11.16-1.4.hum1@aarch64, python3.11-3.11.16-1.4.hum1@src, python3.11-3.11.16-1.4.hum1@x86_64 +12
Show 2 more Red Hat advisories
- RHSA-2026:68132 Released 2026-09-16 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images python3.10-3.10.21-1.3.hum1@aarch64, python3.10-3.10.21-1.3.hum1@src, python3.10-3.10.21-1.3.hum1@x86_64 +12
- RHSA-2026:65505 Released 2026-09-08 · Red Hat rating ImportantRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images python-unversioned-command-3.14.7-1.1.hum1@noarch@public-hummingbird-aarch64-rpms, python-unversioned-command-3.14.7-1.1.hum1@noarch@public-hummingbird-x86_64-rpms, python3-3.14.7-1.1.hum1@aarch64 +28
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Hardened Images | Fixed | RHSA-2026:65505, RHSA-2026:68132, RHSA-2026:68135, RHSA-2026:68154, RHSA-2026:68309 |
Not affected: 1 product
- Red Hat Hardened Images
Timeline
- 2026-10-02 Threatist record created from CVE-2026-82049
- 2026-10-03 Alias added: GHSA-ghff-gcpf-9r9p
- 2026-10-11 1 new reference · CNA
References
Patch 9
- https://github.com/python/cpython/commit/5a57248b22ad3b9aafcaaadae2c304a1923daeca
- https://github.com/python/cpython/pull/157191
- https://github.com/python/cpython/commit/b38be2e6cf9d989075ab73412c63e003ebad4ff3
- https://github.com/python/cpython/commit/b8f23e307097552eaea2604383a12ab280520d0d
- https://github.com/python/cpython/commit/197663d63afed27f66e10e23c194e8a634e60913
- https://github.com/python/cpython/commit/28f315486b3da0352b9a1de1c3c97f4127ba4771
- https://github.com/python/cpython/commit/c66df4e70435d257fd488b35ea129c6f317433a8
- https://github.com/python/cpython/commit/cc1689830c6b9aaddded2fb9f2fe8116867e2c0e
- https://github.com/python/cpython/commit/cccc7ec30212dba2abef53ce4a2bed112ddb690c
Advisory 1
More Python Software Foundation vulnerabilities
- TI-2024-07037 Quadratic complexity parsing cookies with backslashes CVSS 3.1HIGH 7.5
- TI-2024-11791 Bypass extraction filter to modify file metadata outside extraction directory CVSS 3.1MEDIUM 5.3
- TI-2024-00411 Quoted zip-bomb protection for zipfile CVSS 3.1MEDIUM 6.2
- TI-2026-13296 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching CVSS 4.0MEDIUM 6.0
- TI-2024-06422 Email header injection due to unquoted newlines CVSS 3.1MEDIUM 5.5
- TI-2026-04606 Possible to hijack modules in current working directory CVSS 4.0MEDIUM 5.6
Sources
- CVE-2026-82049 · CVE Program
- CVE-2026-82049 · NVD
- FIRST EPSS
- GHSA-ghff-gcpf-9r9p · GitHub Advisory Database · CC BY 4.0
- CVE-2026-82049 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences