Skip to content
Fencer Vulns
high 7.8

CVE-2026-11940 json

tarfile extraction filter bypass allows escaping the destination directory

published 2026-06-23 4 mo ago modified 2026-10-26 14 d ago also BIT-libpython-2026-11940 , BIT-python-2026-11940 , BIT-python-min-2026-11940 , EUVD-2026-38490

cvss
7.8
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 55%
public exploits
0
none known

Summary

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory.  This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.

Patch / fix

  • bitnami libpython 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7
  • bitnami python 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7
  • bitnami python-min 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7
  • Python Software Foundation CPython 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7, 3.15.0b4
  • pypy3 Debian 14 8.0.0+dfsg-1
  • python3.13 Debian 13 3.13.5-2+deb13u5
  • python3.14 Debian 14 3.14.7-1

debian advisories DEBIAN-CVE-2026-11940

  • python3.12 RHEL 9 3.12.14-1.el9_8
  • python3.12-idle RHEL 9 3.12.14-1.el9_8
  • python3.12-libs RHEL 9 3.12.14-1.el9_8
  • python3.12-test RHEL 9 3.12.14-1.el9_8
  • python3.12-tkinter RHEL 9 3.12.14-1.el9_8
  • python3.12 RHEL 8 3.12.14-1.el8_10
  • python3.12-idle RHEL 8 3.12.14-1.el8_10
  • python3.12-libs RHEL 8 3.12.14-1.el8_10

red hat advisories RHSA-2026:74088RHSA-2026:74087RHSA-2026:64816RHSA-2026:64806RHSA-2026:63117RHSA-2026:63024

  • python3 SLES for SAP 15 SP6, SLES for SAP 15 SP5, SLES for SAP 15 SP4 +11 more 3.6.15-150300.10.129.1
  • python3-core SLES for SAP 15 SP6, SLES for SAP 15 SP5, SLES for SAP 15 SP4 +12 more 3.6.15-150300.10.129.1
  • grafana Multi Linux Manager Tools SLE-15 12.4.10-150002.4.27.1
  • mgr-push Multi Linux Manager Tools SLE-15 5.2.5-150002.3.12.1
  • spacecmd Multi Linux Manager Tools SLE-15 5.2.10-150002.3.15.1
  • uyuni-tools Multi Linux Manager Tools SLE-Micro-5, Multi Linux Manager Tools SLE-15 5.2.17-150002.3.20.1
  • venv-salt-minion Multi Linux Manager Tools SLE-Micro-5, Multi Linux Manager Tools SLE-15 3006.0-150002.5.22.1
  • spacewalk-client-tools Multi Linux Manager Tools SLE-15 5.2.7-150002.3.12.1

suse advisories SUSE-SU-2026:4754-1SUSE-SU-2026:4585-1SUSE-SU-2026:4584-1SUSE-SU-2026:4583-1SUSE-SU-2026:4582-1SUSE-SU-2026:4581-1

  • python313 openSUSE Leap 16.0 3.13.14-160000.2.1
  • python313-core openSUSE Leap 16.0 3.13.14-160000.2.1
  • python313-nogil openSUSE Leap 16.0 3.13.14-160000.2.1
  • python313-documentation openSUSE Leap 16.0 3.13.14-160000.2.1
  • python313-nogil-nogil-core openSUSE Leap 16.0 3.13.14-160000.2.1
  • python311 openSUSE Tumbleweed 3.11.15-8.1
  • python312 openSUSE Tumbleweed 3.12.13-8.1
  • python313 openSUSE Tumbleweed 3.13.14-1.1

opensuse advisories openSUSE-SU-2026:21595-1openSUSE-SU-2026:11427-1openSUSE-SU-2026:11428-1openSUSE-SU-2026:11342-1openSUSE-SU-2026:11343-1openSUSE-SU-2026:11285-1

  • python3.14 AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-idle AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-libs AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-test AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-tkinter AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-freethreading AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-freethreading-idle AlmaLinux 9 3.14.7-2.el9_8
  • python3.14-freethreading-libs AlmaLinux 9 3.14.7-2.el9_8

almalinux advisories ALSA-2026:58901ALSA-2026:58902ALSA-2026:58928ALSA-2026:58971ALSA-2026:59009ALSA-2026:56219

  • python3.12 Rocky Linux 10 3.12.14-1.el10_2
  • python3.14 Rocky Linux 10 3.14.7-2.el10_2
  • python3.14 Rocky Linux 9 3.14.7-2.el9_8
  • python3.12 Rocky Linux 9 3.12.14-1.el9_8
  • python3.12 Rocky Linux 8 3.12.14-1.el8_10
  • python3 Rocky Linux 8 3.6.8-78.el8_10.rocky.0
  • python3.9 Rocky Linux 9 3.9.25-7.el9_8.3

rocky linux advisories RLSA-2026:58902RLSA-2026:58928RLSA-2026:58901RLSA-2026:59009RLSA-2026:58971RLSA-2026:56219

  • python3 Alpine 3.23, Alpine 3.22, Alpine 3.21 3.12.14-r0
  • python3 Alpine 3.24 3.14.7-r0

alpine advisories ALPINE-CVE-2026-11940

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-11940 updated cvss 7.3

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

  • Red Hat Enterprise Linux 8 pytz, babel, numpy, scipy, Cython, PyYAML, +100 more
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat Enterprise Linux 9 python3.11, python3.11-idle, python3.11-libs, python3.11-test, python3.11-tkinter
    affected: workaround, no fix planned “Will not fix”
  • Red Hat AI Inference Server 3.2 rhaiis/vllm-cuda-rhel9 1790621718, rhaiis/vllm-rocm-rhel9 1790621713, rhaiis/model-opt-cuda-rhel9 1790621714
    fixed: vendor fix RHSA-2026:73859
  • Red Hat AI Inference Server 3.5 rhaii/vllm-cpu-rhel9 1791473614, rhaii/vllm-cuda-rhel9 1791473631, rhaii/vllm-rocm-rhel9 1791425869, rhaii/vllm-gaudi-rhel9 1791427182, rhaii/vllm-spyre-rhel9 1791818357, rhaii/model-opt-cuda-rhel9 1791803821
    fixed: vendor fix RHSA-2026:82066
  • Red Hat CodeReady Linux Builder EUS (v.9.6) python3 3.9.21-2.el9_6.7, python3.12 3.12.9-1.el9_6.10, python3-idle 3.9.21-2.el9_6.7, python3-test 3.9.21-2.el9_6.7, python3-tkinter 3.9.21-2.el9_6.7, python3.12-idle 3.12.9-1.el9_6.10, +2 more
    fixed: vendor fix RHSA-2026:74088
  • Red Hat Discovery 2 discovery/discovery-server-rhel9 1786638573
    fixed: vendor fix RHSA-2026:54760
  • Red Hat Enterprise Linux AI 3.5 rhelai3/bootc-cuda-rhel9 1793135861, rhelai3/bootc-rocm-rhel9 1793135863, rhelai3/bootc-aws-cuda-rhel9 1793194817, rhelai3/bootc-gcp-cuda-rhel9 1793194815, rhelai3/disk-image-cuda-rhel9 1793206758, rhelai3/bootc-azure-cuda-rhel9 1793194815, +1 more
    fixed: vendor fix RHSA-2026:92452
  • Red Hat Enterprise Linux AppStream (v. 8) python3.12 3.12.14-1.el8_10, python3-idle 3.6.8-78.el8_10, python3-test 3.6.8-78.el8_10, platform-python 3.6.8-78.el8_10, python3-tkinter 3.6.8-78.el8_10, python3.12-libs 3.12.14-1.el8_10, +2 more
    fixed: vendor fix RHSA-2026:56219
show 31 more
  • Red Hat Enterprise Linux AppStream (v. 9) python3.14 3.14.7-2.el9_8, python3.12 3.12.14-1.el9_8, python3.14-libs 3.14.7-2.el9_8, python3.12-libs 3.12.14-1.el9_8, python3-tkinter 3.9.25-7.el9_8.3, python3.14-tkinter 3.14.7-2.el9_8, +2 more
    fixed: vendor fix RHSA-2026:54268
  • Red Hat Enterprise Linux AppStream (v. 10) python3.14 3.14.7-2.el10_2, python3.14-libs 3.14.7-2.el10_2, python3-tkinter 3.12.14-1.el10_2, python3.14-tkinter 3.14.7-2.el10_2, python-unversioned-command 3.12.14-1.el10_2
    fixed: vendor fix RHSA-2026:58902
  • Red Hat Enterprise Linux AppStream AUS (v.8.6) python3-idle 3.6.8-47.el8_6.15, python3-test 3.6.8-47.el8_6.15, platform-python 3.6.8-47.el8_6.15, python3-tkinter 3.6.8-47.el8_6.15
    fixed: vendor fix RHSA-2026:64816
  • Red Hat Enterprise Linux AppStream E4S (v.8.8) python3-idle 3.6.8-51.el8_8.17, python3-test 3.6.8-51.el8_8.17, platform-python 3.6.8-51.el8_8.17, python3-tkinter 3.6.8-51.el8_8.17
    fixed: vendor fix RHSA-2026:64806
  • Red Hat Enterprise Linux AppStream E4S (v.9.4) python3.12 3.12.1-4.el9_4.15, python3-tkinter 3.9.18-3.el9_4.14, python3.12-libs 3.12.1-4.el9_4.15, python3.12-tkinter 3.12.1-4.el9_4.15, python-unversioned-command 3.9.18-3.el9_4.14
    fixed: vendor fix RHSA-2026:74087
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0) python3-tkinter 3.12.9-2.el10_0.11, python-unversioned-command 3.12.9-2.el10_0.11
    fixed: vendor fix RHSA-2026:63024
  • Red Hat Enterprise Linux AppStream EUS (v.9.6) python3.12 3.12.9-1.el9_6.10, python3-tkinter 3.9.21-2.el9_6.7, python3.12-libs 3.12.9-1.el9_6.10, python3.12-tkinter 3.12.9-1.el9_6.10, python-unversioned-command 3.9.21-2.el9_6.7
    fixed: vendor fix RHSA-2026:74088
  • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) python3-idle 3.6.8-47.el8_6.15, python3-test 3.6.8-47.el8_6.15, platform-python 3.6.8-47.el8_6.15, python3-tkinter 3.6.8-47.el8_6.15
    fixed: vendor fix RHSA-2026:64816
  • Red Hat Enterprise Linux AppStream TUS (v.8.8) python3-idle 3.6.8-51.el8_8.17, python3-test 3.6.8-51.el8_8.17, platform-python 3.6.8-51.el8_8.17, python3-tkinter 3.6.8-51.el8_8.17
    fixed: vendor fix RHSA-2026:64806
  • Red Hat Enterprise Linux BaseOS (v. 8) python3 3.6.8-78.el8_10, python3-libs 3.6.8-78.el8_10, python3-test 3.6.8-78.el8_10, platform-python 3.6.8-78.el8_10
    fixed: vendor fix RHSA-2026:56219
  • Red Hat Enterprise Linux BaseOS (v. 9) python3 3.9.25-7.el9_8.3, python3.9 3.9.25-7.el9_8.3, python3-libs 3.9.25-7.el9_8.3
    fixed: vendor fix RHSA-2026:54268
  • Red Hat Enterprise Linux BaseOS (v. 10) python3 3.12.14-1.el10_2, python3.12 3.12.14-1.el10_2, python3-libs 3.12.14-1.el10_2
    fixed: vendor fix RHSA-2026:58902
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6) python3 3.6.8-47.el8_6.15, python3-libs 3.6.8-47.el8_6.15, python3-test 3.6.8-47.el8_6.15, platform-python 3.6.8-47.el8_6.15
    fixed: vendor fix RHSA-2026:64816
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8) python3 3.6.8-51.el8_8.17, python3-libs 3.6.8-51.el8_8.17, python3-test 3.6.8-51.el8_8.17, platform-python 3.6.8-51.el8_8.17
    fixed: vendor fix RHSA-2026:64806
  • Red Hat Enterprise Linux BaseOS E4S (v.9.4) python3 3.9.18-3.el9_4.14, python3.9 3.9.18-3.el9_4.14, python3-libs 3.9.18-3.el9_4.14
    fixed: vendor fix RHSA-2026:74087
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) python3 3.12.9-2.el10_0.11, python3.12 3.12.9-2.el10_0.11, python3-libs 3.12.9-2.el10_0.11
    fixed: vendor fix RHSA-2026:63024
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6) python3 3.9.21-2.el9_6.7, python3.9 3.9.21-2.el9_6.7, python3-libs 3.9.21-2.el9_6.7
    fixed: vendor fix RHSA-2026:74088
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) python3 3.6.8-47.el8_6.15, python3-libs 3.6.8-47.el8_6.15, python3-test 3.6.8-47.el8_6.15, platform-python 3.6.8-47.el8_6.15
    fixed: vendor fix RHSA-2026:64816
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8) python3 3.6.8-51.el8_8.17, python3-libs 3.6.8-51.el8_8.17, python3-test 3.6.8-51.el8_8.17, platform-python 3.6.8-51.el8_8.17
    fixed: vendor fix RHSA-2026:64806
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3 3.9.25-7.el9_8.3, python3.14 3.14.7-2.el9_8, python3.12 3.12.14-1.el9_8, python3-idle 3.9.25-7.el9_8.3, python3-test 3.9.25-7.el9_8.3, python3.14-idle 3.14.7-2.el9_8, +11 more
    fixed: vendor fix RHSA-2026:54268
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) python3-idle 3.12.14-1.el10_2, python3-test 3.12.14-1.el10_2, python3.14-idle 3.14.7-2.el10_2, python3.14-test 3.14.7-2.el10_2, python3.14-freethreading 3.14.7-2.el10_2, python3.14-freethreading-idle 3.14.7-2.el10_2, +3 more
    fixed: vendor fix RHSA-2026:58902
  • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) python3-idle 3.12.9-2.el10_0.11, python3-test 3.12.9-2.el10_0.11
    fixed: vendor fix RHSA-2026:63024
  • Red Hat Enterprise Linux CRB (v. 8) python3.12 3.12.14-1.el8_10, python3.12-idle 3.12.14-1.el8_10, python3.12-test 3.12.14-1.el8_10, python3.12-tkinter 3.12.14-1.el8_10
    fixed: vendor fix RHSA-2026:58971
  • Red Hat Hardened Images python3 3.14.7-1.hum1, python3.14 3.14.7-1.hum1, python3.13 3.13.15-1.hum1, python3-idle 3.14.7-1.hum1, python3-libs 3.14.7-1.hum1, python3-test 3.14.7-1.hum1, +38 more
    fixed: vendor fix RHSA-2026:54534
  • Red Hat OpenShift AI 3.0 rhai/base-image-cpu-rhel9 1790277045, rhai/base-image-cpu-rhel9 1791232023, rhai/base-image-tpu-rhel9 1790276884, rhai/base-image-tpu-rhel9 1791232104, rhai/base-image-cuda-rhel9 1790276974, rhai/base-image-cuda-rhel9 1791231840, +4 more
    fixed: vendor fix RHSA-2026:73960
  • Red Hat OpenShift AI 3.2 rhai/base-image-cpu-rhel9 1790703590, rhai/base-image-cpu-rhel9 1791232203, rhai/base-image-tpu-rhel9 1790703497, rhai/base-image-tpu-rhel9 1791231896, rhai/base-image-cuda-rhel9 1790703586, rhai/base-image-cuda-rhel9 1791232024, +6 more
    fixed: vendor fix RHSA-2026:74460
  • Red Hat OpenShift AI 3.3 rhai/base-image-cpu-rhel9 1791232133, rhai/base-image-tpu-rhel9 1791232235, rhai/base-image-spyre-rhel9 1791231898, rhai/base-image-neuron-rhel9 1791232018, rhai/base-image-rocm-6.4-rhel9 1791231595, rhai/base-image-rocm-7.0-rhel9 1791231596, +2 more
    fixed: vendor fix RHSA-2026:80732
  • Red Hat OpenShift AI 3.4 rhai/base-image-cpu-rhel9 1790703631, rhai/base-image-cpu-rhel9 1791231864, rhai/base-image-tpu-rhel9 1790703539, rhai/base-image-tpu-rhel9 1791232289, rhai/base-image-gaudi-rhel9 1790703553, rhai/base-image-gaudi-rhel9 1791231719, +12 more
    fixed: vendor fix RHSA-2026:80759
  • Red Hat OpenShift AI 3.5 rhai/base-image-cpu-rhel9 1790703656, rhai/base-image-cpu-rhel9 1791232399, rhai/base-image-tpu-rhel9 1790703554, rhai/base-image-tpu-rhel9 1791232301, rhai/base-image-gaudi-rhel9 1790703552, rhai/base-image-gaudi-rhel9 1791232305, +12 more
    fixed: vendor fix RHSA-2026:81161
  • Red Hat Update Infrastructure 5 rhui5/cds-rhel9 1788880464, rhui5/rhua-rhel9 1788880581, rhui5/haproxy-rhel9 1788880456, rhui5/rhua-tp-rhel9 1787241260, rhui5/installer-rhel9 1788765051, rhui5/installer-tp-rhel9 1787135742, +2 more
    fixed: vendor fix RHSA-2026:66018
  • Red Hat Discovery 2 discovery/discovery-ui-rhel9 1786634825 Red Hat Enterprise Linux 6 python, tkinter, python-libs, python-test, python-tools
    not affected: vulnerable code not present

4 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
4 mo ago

Exploit prediction

0.75% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
CNA 4.0 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected packages

ecosystem package affected fixed in
bitnami libpython
<3.10.21
>=3.11.0, <3.11.16
>=3.12.0, <3.12.14
>=3.13.0, <3.13.15
>=3.14.0, <3.14.7
3.10.21
3.11.16
3.12.14
3.13.15
3.14.7
bitnami python
<3.10.21
>=3.11.0, <3.11.16
>=3.12.0, <3.12.14
>=3.13.0, <3.13.15
>=3.14.0, <3.14.7
3.10.21
3.11.16
3.12.14
3.13.15
3.14.7
bitnami python-min
<3.10.21
>=3.11.0, <3.11.16
>=3.12.0, <3.12.14
>=3.13.0, <3.13.15
>=3.14.0, <3.14.7
3.10.21
3.11.16
3.12.14
3.13.15
3.14.7

Affected products

  • Python Software Foundation CPython

Classification

Weakness
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory
  • CWE-59 Improper Link Resolution Before File Access

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.