Vulnerability CRITICAL (CVSS 9.4) Python ‘tarfile’ Vulnerability: Arbitrary Filesystem Writes Possible! Do Son June 5, 2025 2 minutes read 0 Add as a preferredsource on Google π Access to This Vulnerability Report Requires Support This article is available to verified supporters only - contribute to read the full report Or choose another support option: Support via PayPal Support via BMC Share this article: Facebook Post LinkedIn Telegram Copy Link Related posts: Langroid Flaws (CVSS 9.8) Expose LLM Apps to RCE Urgent Bosch Alert: Critical RCE Flaw (CVSS 10.0) Exposes Dispatch & Matrix Software to Attack Critical Python Tarfile Flaw (CVE-2025-4517, CVSS 9.4): Arbitrary File Write, PoC Available Critical Arbitrary File Upload Vulnerability in SonicWall SMA 100 Series Devices Critical SUSE Manager Flaw (CVSS 9.8) Allows Unauthenticated Root RCE on All Clients β PoC Available! Written by@DdoS Β· Security ResearcherDo SonDo Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks. Tags: CPython cybersecurity Python Remote Code Execution security advisory tarfile Vulnerability Leave a Reply Cancel replyYou must be logged in to post a comment.