What happened
Unauthenticated Path Traversal in fastcore untar_dir() via tarfile.extractall().
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusUnauthenticated Path Traversal in fastcore untar_dir() via tarfile.extractall().rahulreddykarne2026-09-26T08:40:55Verifiedrahulreddykarne/CVE-2026-65320-fastcoreUnauthenticated Path Traversal in fastcore untar_dir() via tarfile.extractall().rahulreddykarne2026-09-26T08:40:55VerifiedPoC-in-GitHub · advanced-threat-research/CreosoteCreosote is our solution to searching for the tarfile vulnerability described by CVE-2007-4559.★ 82advanced-threat-research2022-09-20CandidatePoC-in-GitHub · Ooscaar/MALWCVE-2007-4559 - Polemarch exploit★ 0Ooscaar2022-10-21CandidatePoC-in-GitHub · davidholiday/CVE-2007-4559★ 0davidholiday2023-09-10CandidatePoC-in-GitHub · luigigubello/trellix-tarslip-patch-bypassBypass for CVE-2007-4559 Trellix patch★ 0luigigubello2024-05-03CandidatePoC-in-GitHub · m0d0ri205/wargame-tarpiokaYISF 2024 CTF-Web (Directory Traversal via ".tar" file, CVE-2007-4559), easy★ 0m0d0ri2052024-07-07CandidatePoC-in-GitHub · depers-rus/CVE-2007-4559★ 1depers-rus2025-07-01CandidatePoC-in-GitHub · jithinodattu/CVE-2007-4559-lab★ 0jithinodattu2026-04-18CandidateSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.