CVE-2026-11940Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory. This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-22CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-06-25); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Daily CyberSecurity@the_yellow_fall88d
Disclosure
A new CPython tarfile vulnerability (CVE-2026-11940) allows directory escape attacks. Learn how this extraction filter bypass exposes systems. #Python #CyberSecurity #CVE202611940 #Vulnerability #AppSec https://securityonline.info/cpython-tarfile-vulnerability https://t.co/0mPyafDZHm
Post summary
The post announces CVE-2026-11940, a directory escape vulnerability in CPython tarfile extraction, with no additional details on exploitation, patching, or technical specifics.
020731.2K
12.8K followersView on X
Open Source Security mailing list@oss_security91d
Disclosure
CVE-2026-11940: CPython: tarfile extraction filter bypass allows escaping the destination directory https://www.openwall.com/lists/oss-security/2026/06/23/6 by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself. This was an incomplete fix of CVE-2025-4330.
Post summary
The post announces CVE‑2026‑11940, a CPython tarfile filter bypass, providing technical details and a link to an Openwall discussion, indicating an incomplete fix of a prior CVE.
00010159
4.6K followersView on X

Explore more

Back to dashboard