CVE-2026-32808: Tarfile Symlink Validation Bypasscve-2026-32808-tarfile-symlink-validation-bypass
Validation of `tarfile` members via `getmembers()` before calling `extractall()` or `extract()` lacks checks for symbolic or hard links (`issym()` or `islnk()`). Path traversal checks on entry names are insufficient because attackers can first extract a symlink and then route subsequent extracted files through it to arbitrarily escape the destination directo
