tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter="tar" to write files outside the destination directory, subject to the permissions of the extracting process.
This is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v4.0
Vulnerable Products
python software foundation:cpython
References 6
https://github.com/python/cpython/issues/160097
cna@python.org
https://github.com/python/cpython/pull/160098
cna@python.org
https://mail.python.org/archives/list/security-announce@python.org/thread/43JOW…
cna@python.org
https://github.com/python/cpython/commit/0901ad4ffb22605f12b705d1c1197f0a01f0ba…
cna@python.org
https://github.com/python/cpython/commit/c6ada40177436e4e2533a7b252082b5f0c0434…
cna@python.org
https://github.com/python/cpython/commit/e7e0b3523ad6ba8472873dda594cf4021a16f8…
cna@python.org