Medium, CVSS 5.9PyPIPublished
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
CVE-2026-50558 · GHSA-f42x-p2mx-hm8r
- Affected
- PyPI penelope-shell-handler < 0.20.0
- Fixed in
- 0.20.0· Vendor fix available
- Issue
- Penelope versions prior to 0.19.3 extracted tar archives received from remote sessions without validating archive member paths. When using the affected Unix download path, a malicious or compromised remote session could return a crafted tar archive containing path traversal entries, such as ../, causing files to be written outside the intended download directory on the Penelope operator's machine. The impact is limited to files writable by the user running Penelope. In some cases, this arbitrary file write could be chained to operator-side code execution if the attacker can overwrite a file that Penelope or the user later executes, such as ~/.penelope/peneloperc. The issue has been fixed in version 0.19.3 by rejecting unsafe archive paths during extraction. Affected conditions The issue requires the operator to use the Main Menu download command to download files from a malicious or compromised remote session that can influence the tar archive returned to Penelope. The Python…
Recommended action: Upgrade to 0.20.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.