Exploit for CVE-2025-4517-PoC

kitploit · 2026-09-02

Description

PoC and explanation for CVE-2025-4517, a vulnerability used in a CTF context.

Entry point

Parameterbackup_path · path

Path/opt/backup_clients/restore_backup_clients.py

TarFile.extractall() with filter="data" can bypass safeguards and write files outside the extraction directory.

All known vulnerabilities by product

Almalinux Astra Linux Centos Debian Ibm Aix Linuxmint Python Red Hat

CVSS 9.4 for CVE-2025-4517

9.4

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:LOW

EPSS Score

1.4%higher than 71.2% of all CVEs

Updated 2026-09-05

CVE Information

Exploit Details

Modified:2026-09-02 23:44

Last Seen:2026-09-04 23:40

Reporter:KitPloit

Tags

CVE-2025-4517proof of conceptCTF challengetools

Other exploits for CVE-2025-4517

CVE-2025-4517-POC

2026-09-07 KitPloitKITPLOIT

CVE-2025-4517-PoC

2026-09-05 KitPloitKITPLOIT

CVE-2025-4517-Python-tarfile-filter-data-Bypass-PoC

2026-09-03 KitPloitKITPLOIT

CVE-2025-4517-poc

2026-09-03 KitPloitKITPLOIT

PyPath-Escape-CVE-2025-4517-Exploit-Research

2026-09-02 KitPloitKITPLOIT

CVE-2025-4517-POC-Sudoers

2026-09-02 KitPloitKITPLOIT

CVE-2025-4517-tarfile-PATH_MAX-bypass

2026-08-31 KitPloitKITPLOIT

CVE-2025-4138-4517-POC

2026-08-31 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-KERBURENTHUSIASM-CVE-2025-4517-POC
# CVE-2025-4517-PoC

PoC и объяснение для CVE-2025-4517, использованной в CTF, в котором я участвовал.

Объяснение скоро...