THREATOPS
THREAT OPSThreat News › Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

medoss_secPublished 2026-09-14

<p>Posted by Alan Coopersmith on Sep 14</p>-------- Forwarded Message --------<br /> Subject: [Security-announce][CVE-2026-82049] tarfile extraction filters allow <br /> file modification and content disclosure via hard link to symlink<br /> Date: Mon, 14 Sep 2026 17:59:38 +0100<br /> From: Stan Ulbrych via Security-announce &lt;security-announce () python org&gt;<br /> Reply-To:

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/777