VDB
ECHO-5b27-f272-cf44
ECHO-5b27-f272-cf44
PUBLISHED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Echo | python3.11 | 0, 0 |
Exploit Intelligence
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc-repo)
- A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc-repo)
- Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation (github-poc-repo)
- CVE-2025-4138 - Python Arbitrary file write outside extraction directory (github-poc-repo)
- d3vn0mi/CVE-2025-4138-POC (github-poc-repo)
- d3vn0mi/CVE-2025-4138-POC (github-poc)
- Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation (github-poc)
- A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc)
- CVE-2025-4138 - Python Arbitrary file write outside extraction directory (github-poc)
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc)
…and 1 more exploits
Timeline
- Sep 15, 2025 CVE Published
- May 11, 2026 CVE Updated