← Back

CVE-2026-3087

nvd nist
Published: Apr 27, 2026Modified: Aug 13, 2026

JSON object

Loading...
6.0
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: CNA (Secondary)

Description

If `shutil.unpack_archive()` is given a ZIP archive with an absolute Windows path containing a drive (`C:\\...`) then the archive will be extracted outside the target directory which is different than other operating systems. Only Windows is affected by this vulnerability.

Affected (9)

Products: Python: Python
Python
1 product
Python
Configuration A
9 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Python
Python
Up to 3.14.4
Python
Version 3.15.0 alpha1
Python
Version 3.15.0 alpha2
Python
Version 3.15.0 alpha3
Python
Version 3.15.0 alpha4
Python
Version 3.15.0 alpha5
Python
Version 3.15.0 alpha6
Python
Version 3.15.0 alpha7
Python
Version 3.15.0 alpha8
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (14)

Source: cna@python.org
Source: cna@python.org
Patch
Source: cna@python.org
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
Patch
Source: cna@python.org
ExploitIssue TrackingPatchVendor Advisory
Source: cna@python.org
Issue TrackingPatch
Source: cna@python.org
Mailing ListVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.