https://seclists.org/oss-sec/2026/q2/813: [oss-security][CVE-2026-7774] Cpython: tarfile.data_filter path traversal bypass allows writing outside the extraction dictory
Published Jun 4, 2026
·Updated
Affected Software
1 affected component
Python CPython<3.15.0
Frequently Asked Questions
1
What is the severity of CVE-2026-7774?
CVE-2026-7774 has a high severity due to its potential for path traversal attacks that can lead to unauthorized file writes.
2
How do I fix CVE-2026-7774?
To fix CVE-2026-7774, upgrade to CPython version 3.15.0 or later, which resolves the vulnerability.
3
What versions of Python CPython are affected by CVE-2026-7774?
CVE-2026-7774 affects all Python CPython versions before 3.15.0.
4
What does the path traversal bypass in CVE-2026-7774 allow?
The path traversal bypass in CVE-2026-7774 allows attackers to write files outside the designated extraction directory.
5
Is there a workaround for CVE-2026-7774 if I cannot upgrade?
There are no recommended workarounds for CVE-2026-7774; upgrading to a fixed version is the best solution.