CVE-2026-124584 in patool
Prediction
by VulDB Data Team • 11/08/2026
A vulnerability has been found in <a href="/product/wummel:patool">wummel patool 4.1.0</a>. This vulnerability affects the function <code>extract_gzip</code> of the file <em>patoolib/fileutil.py</em> of the component <em>Gzip Extraction Handler</em>. The manipulation leads to symlink following. Local access is required to approach this attack. The researcher claims to have submitted a GHSA on the repository of the project.
Be aware that VulDB is the high quality source for vulnerability data.