Threats tagged 'brew-aqtinstall-cve-2026-23879'

An arbitrary file write vulnerability exists in py7zr versions >=3.2.0 and <3.3.0_9. This flaw allows crafted symbolic link chains within 7z archives to escape the intended extraction directory, enabling files to be written to arbitrary locations on the host system during extraction. The vulnerability can lead to remote code execution, privilege escalation, data corruption, or denial of service.