THREAT OPS › Threat News › [NVD] CVE-2025-4330 (HIGH 7.5) — Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.
You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extrac
[NVD] CVE-2025-4330 (HIGH 7.5) — Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extrac
CVE-2025-4330 CVSS: 7.5 HIGH Published: 2025-06-03T13:15:20.503
Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.
You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-4330cve
- https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filterurl
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-4330