CVE-2026-114583: tar filter allows writing outside destination via empty-named symlink
tar filter allows writing outside destination via empty-named symlink
Other sources
tarfile.tarfilter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter="tar" to write files outside the destination directory, subject to the permissions of the extracting process. This is the tarfile.tarfilter counterpart of CVE-2026-7774, which covered tarfile.datafilter.
— Ubuntu
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
azurelinux/python3to a version that resolves this vulnerability.Fixed in 3.12.16-1 - Upgrade
Upgrade
bitnami/libpythonto a version that resolves this vulnerability.Fixed in 3.11.18 - Upgrade
Upgrade
bitnami/libpythonto a version that resolves this vulnerability.Fixed in 3.12.16 - Upgrade
Upgrade
bitnami/libpythonto a version that resolves this vulnerability.Fixed in 3.13.18 - Upgrade
Upgrade
bitnami/libpythonto a version that resolves this vulnerability.Fixed in 3.14.10 - Upgrade
Upgrade
bitnami/libpythonto a version that resolves this vulnerability.Fixed in 3.15.2 - Upgrade
Upgrade
bitnami/python-minto a version that resolves this vulnerability.Fixed in 3.11.18 - Upgrade
Upgrade
bitnami/python-minto a version that resolves this vulnerability.Fixed in 3.12.16 - Upgrade
Upgrade
bitnami/python-minto a version that resolves this vulnerability.Fixed in 3.13.18 - Upgrade
Upgrade
bitnami/python-minto a version that resolves this vulnerability.Fixed in 3.14.10 - Upgrade
Upgrade
bitnami/python-minto a version that resolves this vulnerability.Fixed in 3.15.2 - Upgrade
Upgrade
bitnami/pythonto a version that resolves this vulnerability.Fixed in 3.11.18 - Upgrade
Upgrade
bitnami/pythonto a version that resolves this vulnerability.Fixed in 3.12.16 - Upgrade
Upgrade
bitnami/pythonto a version that resolves this vulnerability.Fixed in 3.13.18 - Upgrade
Upgrade
bitnami/pythonto a version that resolves this vulnerability.Fixed in 3.14.10 - Upgrade
Upgrade
bitnami/pythonto a version that resolves this vulnerability.Fixed in 3.15.2 - Upgrade
Upgrade
debian/python3.13to a version that resolves this vulnerability.Fixed in 3.13.18-1 - Upgrade
Upgrade
debian/python3.14to a version that resolves this vulnerability.Fixed in 3.14.10-1 - Upgrade
Upgrade
debian/python3.15to a version that resolves this vulnerability.Fixed in 3.15.2-1 - Upgrade
Upgrade
debian/python3.14to a version that resolves this vulnerability.Fixed in 3.14.9-1 - Upgrade
Upgrade
debian/python3.15to a version that resolves this vulnerability.Fixed in 3.15.1-1
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications that extract untrusted or attacker-controlled tar archives with tarfile.extractall() using filter="tar" are exposed. The impact is limited by the permissions of the process performing extraction.
What does an attacker need to exploit it?
An attacker needs to supply a crafted tar archive containing link entries, such as symlinks with empty or directory-like names, followed by archive members whose extraction can be redirected through those links.
Are extra application settings required for exploitation?
The affected extraction mode is explicitly filter="tar". Exploitation occurs when the application extracts a malicious archive using that filter; no other configuration requirements are provided.
What is the practical impact of successful exploitation?
A crafted archive can cause later members to be written outside the intended destination directory. The attacker can write only where the extracting process has permission.