The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10189 advisory.

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)
      * cpython: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)
      * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)
      * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)
      * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside     extraction directory (CVE-2025-4138)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2025:0107 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2024-12718:
    Allows modifying some file metadata (e.g. last modified) with filter=dataor file permissions (chmod)     with filter=tarof files outside the extraction directory.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Only     Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the     extraction filter feature.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4138:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4330:
    Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

    CVE-2025-4435:
    When using a TarFile.errorlevel = 0and extracting with a filter the documented behavior is that any     filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel =     0in affected versions is that the member would still be extracted and not skipped.

    CVE-2025-4517:
    Allows arbitrary filesystem writes outside the extraction directory during extraction with filter=data.
    You are affected by this vulnerability if using the tarfilemodule to extract untrusted tar archives     using TarFile.extractall()or TarFile.extract()using the filter=parameter with a value of dataor     tar. See the tarfile  extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information.
    Note that for Python 3.14 or later the default value of filter=changed from no filtering to `data,     so if you are relying on this new default behavior then your usage is also affected.
    Note that none of these vulnerabilities significantly affect the installation of source distributions     which are tar archives as source distributions already allow arbitrary code execution during the build     process. However when evaluating source distributions it's important to avoid installing source     distributions with suspicious links.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10602 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: python: Bypass extraction filter to modify file metadata outside extraction directory     (CVE-2024-12718)

    * cpython: python: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.0.1.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.3 advisory.

  - The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17,     iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14.
    Processing web content may disclose sensitive information. (CVE-2023-40403)

  - Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host     nor ALL, allows listed users to execute commands on unintended machines. (CVE-2025-32462)

  - A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without     proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks     and race conditions. (CVE-2025-6020)

  - Allows modifying some file metadata (e.g. last modified) with filter=data or file permissions (chmod)     with filter=tar of files outside the extraction directory. You are affected by this vulnerability if     using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract()     using the filter= parameter with a value of data or tar. See the tarfile extraction filters     documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more     information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions     don't include the extraction filter feature. Note that for Python 3.14 or later the default value of     filter= changed from no filtering to `data, so if you are relying on this new default behavior then     your usage is also affected. Note that none of these vulnerabilities significantly affect the installation     of source distributions which are tar archives as source distributions already allow arbitrary code     execution during the build process. However when evaluating source distributions it's important to avoid     installing source distributions with suspicious links. (CVE-2024-12718)

  - Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination     directory, and the modification of some file metadata. You are affected by this vulnerability if using the     tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the     filter= parameter with a value of data or tar. See the tarfile extraction filters documentation     https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter for more information. Note that     for Python 3.14 or later the default value of filter= changed from no filtering to `data, so if you     are relying on this new default behavior then your usage is also affected. Note that none of these     vulnerabilities significantly affect the installation of source distributions which are tar archives as     source distributions already allow arbitrary code execution during the build process. However when     evaluating source distributions it's important to avoid installing source distributions with suspicious     links. (CVE-2025-4138, CVE-2025-4330)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10189 advisory.

    * cpython: Tarfile extracts filtered members when errorlevel=0 (CVE-2025-4435)

    * cpython: Bypass extraction filter to modify file metadata outside extraction directory (CVE-2024-12718)

    * cpython: Extraction filter bypass for linking outside extraction directory (CVE-2025-4330)

    * python: cpython: Arbitrary writes via tarfile realpath overflow (CVE-2025-4517)

    * cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction     directory (CVE-2025-4138)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
241250	AlmaLinux 9 : python3.12 (ALSA-2025:10189)	Nessus	Alma Linux Local Security Checks	7/3/2025	7/3/2025	critical
241391	Alibaba Cloud Linux 3 : 0107: python3 (ALINUX3-SA-2025:0107)	Nessus	Alibaba Cloud Linux Local Security Checks	7/7/2025	7/7/2025	critical
241537	RHEL 8 : python3 (RHSA-2025:10602)	Nessus	Red Hat Local Security Checks	7/8/2025	7/8/2025	critical
258029	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.3)	Nessus	Misc.	8/27/2025	8/27/2025	critical
266508	RockyLinux 9 : python3.12 (RLSA-2025:10189)	Nessus	Rocky Linux Local Security Checks	10/4/2025	10/4/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical