This vulnerability in CPython's tarfile module (CVE-2025-4138) involves improper limitation of pathnames (CWE-22) during extraction of tar archives. Specifically, when using the extraction filters "data" or "tar" with TarFile.extractall() or TarFile.extract(), the filter can be ignored, allowing symlink targets to escape the destination directory. This can lead to unauthorized file system modifications outside the intended extraction path. The issue affects Python versions from 0 through 3.14.0a1, with the default filter changing to "data" in Python 3.14, thus broadening the impact. No known exploits are reported in the wild as of the publication date.

An attacker providing a crafted tar archive can cause symlink targets to point outside the extraction directory, potentially modifying files or metadata outside the intended scope. This can lead to unauthorized file system changes. The vulnerability has a CVSS score of 7.5 (high severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, and high confidentiality impact. It does not affect the installation of source distributions significantly since those already allow arbitrary code execution during build.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid extracting untrusted tar archives using TarFile.extractall() or TarFile.extract() with the filter parameter set to "data" or "tar". Exercise caution when installing source distributions containing suspicious symbolic links. Monitor the Python Software Foundation advisories for updates and apply official patches once released.