CVE-2026-124584 | BDVDB-2026-402430 Detail
wummelpatool
Description#
A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extract_gzip of the file patoolib/fileutil.py of the component Gzip Extraction Handler. The manipulation leads to symlink following. Local access is required to approach this attack. The researcher claims to have submitted a GHSA on the repository of the project.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact low. Attack vector: local.
Weaknesses#
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.