CVE-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination
Attackers can create empty directories outside the extraction destination via crafted tar archives, potentially disrupting filesystem structure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-19672?
CVE-2026-19672 is a medium-severity path traversal vulnerability in CPython, published on 19 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given.
Only empty directories are created outside the destination. Member contents are still extracted inside it. To return to the destination the member's name must contain the destination directory's own final component, so extraction into a secure randomised directory is not affected.
This affects POSIX platforms only. On Windows, .. components are collapsed before the path reaches the filesystem, so the directories outside the destination are never created.
Weakness: CWE-22
Which versions are affected by CVE-2026-19672?
3 open source packages ship an affected version, including libpython, python and python-min.
| Package | Affected | Fixed in |
|---|---|---|
libpython Bitnami | All versions | 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.8 |
python Bitnami | All versions | 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.8 |
python-min Bitnami | All versions | 3.10.22, 3.11.17, 3.12.15, 3.13.16, 3.14.8 |
How do I fix CVE-2026-19672?
Upgrade libpython to a fixed version for your release line: 3.10.22, 3.11.17, 3.12.15 or 3.13.16.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-19672 being exploited?
There is no known exploitation of CVE-2026-19672 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2026-19672, AZL-110510, AZL-97038, BELL-CVE-2026-19672, BIT-libpython-2026-19672, BIT-python-2026-19672 and 11 more.