High 7.8Published Jun 23, 2026

CVE-2026-11940tarfile extraction filter bypass allows escaping the destination directory

Updated under an hour ago (Oct 26, 2026, 3:10 PM ET)

Does this affect you?

It affects Python Software Foundation CPython. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Python Software Foundation CPython

Exploited in the last 30 days

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory. This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.

CVSS: 7.8 HIGH (v4.0, CNA)CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Weakness (CWE): CWE-22, CWE-59
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: PSF
NVD analysis: Awaiting Analysis
Record last updated: Aug 12, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Python Software Foundation CPython python_software_foundation:cpython (from the name)	before 3.10.21; from 3.11.0 before 3.11.16; from 3.12.0 before 3.12.14; from 3.13.0 before 3.13.15; from 3.14.0 before 3.14.7; from 3.15.0a1 before 3.15.0b4	CNA record

References

References

https://github.com/python/cpython/pull/151559	patch
https://mail.python.org/archives/list/security-announce@python.org/thread/LD6QIISNQFQYOIEPJNEUIPV7S3V76FZH/	vendor-advisory
https://github.com/python/cpython/issues/151558	issue-tracking
https://github.com/python/cpython/commit/27dd970bf6b17ebca7c8ed486a40ab043ed7af8f	patch
https://github.com/python/cpython/commit/672825e2f36a57e173959b0d9d409d4560dab8df	patch
https://github.com/python/cpython/commit/771d12dda5140313db0ac550292987975651bbde	patch
https://github.com/python/cpython/commit/79c06bd5c6afa3c440d50faf7ee1b147c8832b4c	patch
https://github.com/python/cpython/commit/be13e86f6b9788a6f4d0419dffef72cbae5865c9	patch
https://github.com/python/cpython/commit/e5fdbd8d5aa923bd9111b112ea73bd6ec7c47877	patch
https://github.com/python/cpython/commit/0f852b3f07dd8e71e40326a51c02afbf16a42cc5	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.