PT-2025-23611 · Python+11 · Python+11
CVSS v2.0
9.7
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:P |
Name of the Vulnerable Software and Affected Versions
Python versions 3.12 through 3.13
Description
An issue in the
tarfile module allows arbitrary filesystem writes outside the extraction directory when extracting untrusted tar archives. This occurs when using the TarFile.extractall() or TarFile.extract() functions with the filter parameter set to data or tar. For Python 3.14 and later, the default value of filter changed to data, making usage relying on this default behavior also susceptible. An attacker could exploit this to modify files in arbitrary locations, cause data loss, or potentially achieve privilege escalation or container escape if the scripts are executed with root privileges.Recommendations
Update Python 3.12 to version 3.12.11 or later.
Update Python 3.13 to version 3.13.4 or later.
As a temporary mitigation, avoid using the
filter parameter with values data or tar when extracting untrusted archives.Exploit
Fix
DoS
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Debian
Ibm Aix
Linuxmint
Python
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu