Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Python Improper Preservation of Permissions Vulnerability - CVE-2026-4360 - Vulnerability Database
Python

Python Improper Preservation of Permissions Vulnerability - CVE-2026-4360

Medium
Reference: CVE-2026-4360
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-4360
Title: Python Improper Preservation of Permissions Vulnerability
Overview:

In the Tarfile.extract() function the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content from untrusted tar files could end up writing files with an unexpected uid/gid despite the user passing filter39data39 to the extract() function.