VDB
MINI-w4p8-v8gg-27cq
MINI-w4p8-v8gg-27cq
PUBLISHED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| MinimOS | python-3.12-dev | 0, 0 |
| MinimOS | python-3.12 | 0, 0 |
| MinimOS | python-3.12-base | 0, 0 |
| MinimOS | python-3.12-base-dev | 0, 0 |
| MinimOS | python-3.12-doc | 0, 0 |
| MinimOS | python-3.12-tk | 0, 0 |
Exploit Intelligence
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc-repo)
- A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc-repo)
- Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation (github-poc-repo)
- CVE-2025-4138 - Python Arbitrary file write outside extraction directory (github-poc-repo)
- d3vn0mi/CVE-2025-4138-POC (github-poc-repo)
- d3vn0mi/CVE-2025-4138-POC (github-poc)
- Tarfile module directory traversal vulnerability ( with overflow crossed Directory ) --> Lead to Privilege escalation (github-poc)
- A Python script to generate a malicious tar archive that exploits CVE-2025-4138 / CVE-2025-4517. (github-poc)
- CVE-2025-4138 - Python Arbitrary file write outside extraction directory (github-poc)
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass (github-poc)
…and 1 more exploits
Timeline
- Jun 5, 2025 CVE Published
- Jun 5, 2025 CVE Updated