{"id":86440,"date":"2026-02-11T16:13:53","date_gmt":"2026-02-11T16:13:53","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-4330-critical-python-tarfile-extraction-vulnerability","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-4330-critical-python-tarfile-extraction-vulnerability\/","title":{"rendered":"CVE-2025-4330: Critical Python Tarfile Extraction Vulnerability<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report details the critical vulnerability CVE-2025-4330, affecting Python’s tarfile module. The vulnerability allows the extraction filter to be ignored, enabling symlink targets to point outside of the destination directory, and the modification of some file metadata. This could potentially lead to system compromise or data leakage, and is particularly pertinent to users of Python 3.14 or later.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-4330
\nSeverity: Critical (CVSS: 7.5)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Potential system compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Python | 3.14 and later<\/p>\n

How the Exploit Works<\/strong><\/p>\n

This vulnerability exploits a flaw in the tarfile module of Python where the extraction filter can be ignored. This allows for symlink targets to point outside the destination directory, potentially leading to unauthorized access to files or directories. Additionally, it enables the modification of some file metadata, presenting potential data integrity issues.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

Below is a conceptual example of how this vulnerability might be exploited. This example illustrates the use of TarFile.extractall() with a malicious tar file that contains a symlink pointing to a sensitive file outside the extraction directory.<\/p>\n

import tarfile\n# Open the malicious tar file\nwith tarfile.open('malicious.tar', 'r') as tar:\n# Extract all files, ignoring the extraction filter\ntar.extractall(path='destination_directory', filter=None)<\/code><\/pre>\n
In this example, if ‘malicious.tar’ contains a symlink that points to a file outside ‘destination_directory’, the file would still be extracted due to the filter being ignored. This could potentially lead to unauthorized access to sensitive files.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview This report details the critical vulnerability CVE-2025-4330, affecting Python’s tarfile module. The vulnerability allows the extraction filter to be ignored, enabling symlink targets to point outside of the destination directory, and the modification of some file metadata. This could potentially lead to system compromise or data leakage, and is particularly pertinent to users of […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86440","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t