CVE-2026-114583 — tar filter allows writing outside destination via empty-named symlink

Impact

tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter="tar" to write files outside the destination directory, subject to the permissions of the extracting process.

Source excerpt · PSF

Affected packages

This source has no supported package-version data for matching. You can read the advisory here, but this record alone cannot power a dependency check.

Affected products

Vendor version evidence. Product records are separate from automatic dependency matching.

Python Software Foundation · CPython

Other versions: unaffected

Version / range	Source status
0 to before 3.11.18	affected
3.12.0 to before 3.12.16	affected
3.13.0 to before 3.13.18	affected
3.14.0 to before 3.14.10	affected
3.15.0 to before 3.15.2	affected
3.16.0a1 to before 3.16.0	affected

PSF version evidence

Original source description

tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extraction directory. This allowed a malicious tar archive to cause tarfile.extractall() with filter="tar" to write files outside the destination directory, subject to the permissions of the extracting process.

This is the tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter.

Set up in your agent.

Investigate in your agent.

tar filter allows writing outside destination via empty-named symlink

Impact

Affected packages

Affected products

Python Software Foundation · CPython

Original source description

References