THREAT OPS › Threat News › [NVD] CVE-2025-4517 (CRITICAL 9.4) — Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".
You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= param
[NVD] CVE-2025-4517 (CRITICAL 9.4) — Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= param
CVE-2025-4517 CVSS: 9.4 CRITICAL Published: 2025-06-03T13:15:20.837
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data".
You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfi
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-4517cve
- https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filterurl
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-4517