CVE-2025-4138

CVE-2025-4138 is a path traversal vulnerability affecting the Python tarfile module when extracting untrusted archives using specific filter parameters. This flaw allows attackers to bypass extraction filters, enabling symlink targets to point outside the intended destination directory and modify file metadata. Rated 7.5 HIGH on the CVSS scale, this vulnerability can be exploited remotely with low attack complexity, potentially leading to high confidentiality impact. There is currently no evidence of active exploitation, and no public exploit code is available, though it has garnered some community discussion and media coverage.