0xDTC/CVE-2025-4517-tarfile-PATH_MAX-bypass

PoC

Python tarfile data filter bypass via PATH_MAX overflow in os.path.realpath() - CVE-2025-4517 / CVE-2025-4330

view exploit source poc_in_githubauthor 0xDTCpublished 2026-02-15catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-4517US	—	1.43% (73rd)	Exploit	2025-06-03
Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to ex…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.