CVE-2026-7774

A flaw was found in the tarfile.data_filter function within the Python tarfile module. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive containing malicious link entries, such as symlinks with empty or directory-like names. This bypass allows the attacker to redirect subsequent archive members outside the intended extraction directory, leading to arbitrary file writes on the system where the archive is extracted. The impact of this flaw is limited by the permissions of the extracting process.

The CPython tarfile module is susceptible to arbitrary file writes when processing a specially crafted archive containing malicious link entries. Exploitation requires user interaction to extract the archive, and the impact is constrained by the permissions of the extracting process, limiting the scope of potential data integrity compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.