CVE-2025-8869

Advisory

Affected versions of the pip package are vulnerable to Arbitrary File Overwrite due to improper validation of symbolic link targets in the fallback tar extraction code. In src/pip/_internal/utils/unpacking.py, the _untar_without_filter routine used when the Python tarfile module lacks PEP 706 (no tarfile.data_filter) extracted symlink members with tar._extract_member without verifying that link destinations resolve under the extraction root, a check later added via the is_symlink_target_in_tar helper.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/pypa/pip/commit/f2b92314da012b9fffa36b3f3e67748a37ef464a
• https://github.com/advisories/GHSA-4xh5-x5gv-qwph
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8869