CVE-2025-4517-PoC

CVE-2025-4517 is a vulnerability in Python’s tarfile module that allows arbitrary file writes outside the extraction directory when extracting untrusted tar archives. The issue occurs when using TarFile.extract() or TarFile.extractall() with filter="data" or filter="tar", which does not fully prevent path traversal through crafted tar members.

Python 3.14 changed the default extraction filter to "data", so applications relying on this default may also be affected. While source distribution installation is not significantly impacted, any application that extracts untrusted tar files using these filters is exposed.

PoC is for educational and authorized security research purposes only.