A critical security vulnerability (CVE-2026-114583) in Python's tarfile module allows crafted tar archives with malicious link entries, including symlinks with empty or directory-like names, to bypass tarfile.tar_filter protections. This can cause tarfile.extractall() with filter="tar" to write files outside the intended extraction directory, potentially leading to unauthorized file writes. The issue affects Python versions prior to 3.11.6-45.oe2403sp1 and has been fixed in that version.