PT-2026-46262 · Python+1 · Python+1

Petr Viktorin + 2 · CVE-2026-7774 · Published 2026-06-04 · Updated 2026-08-01

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Python (affected versions not specified)

Description The tarfile.data filter can be bypassed using crafted link entries, such as symlinks with empty or directory-like names. This allows a malicious tar archive to redirect subsequent archive members outside the intended extraction directory, causing the tarfile.extractall() function to write files to arbitrary locations on the system, depending on the permissions of the process performing the extraction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BIT-LIBPYTHON-2026-7774

BIT-PYTHON-2026-7774

BIT-PYTHON-MIN-2026-7774

CVE-2026-7774

ECHO-E345-EF13-BE4F

OESA-2026-2694

OESA-2026-2695

OPENSUSE-SU-2026:11101-1

OPENSUSE-SU-2026:11181-1

OPENSUSE-SU-2026:11426-1

OPENSUSE-SU-2026:11427-1

OPENSUSE-SU-2026:11428-1

PSF-2026-26

USN-8509-1

Affected Products

Linuxmint

Python

References · 76

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7774.json · Exploit
• https://github.com/python/cpython/commit/c063191cb7f9170f9565e305f8aa2b79ab2bf609 · Patch
• https://github.com/python/cpython/commit/10a13bee3c24f9c62b602e696334ff2272a40efc · Patch
• https://github.com/python/cpython/commit/0d28f5e46e151718972dfabd91205444d0037b6d · Patch
• https://github.com/python/cpython/commit/5cf47a248c35c375d610b87b2f72fd1ed454b558 · Patch
• https://github.com/python/cpython/commit/0478bd83d82b255e0f29f613367a59d261e7eaa2 · Patch
• https://github.com/python/cpython/commit/578411982c16f753f4893532510099ef665117da · Patch
• https://github.com/python/cpython/commit/74cca9a92fb7d653e404843a56b8bdc7b0afdbbf · Patch
• https://github.com/python/cpython/pull/149487 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:11426-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-7774 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2695 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-9669 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8509-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-2297 · Vendor Advisory