CVE-2026-32808 - Vulnerability Analysis

Overview

pyLoad < 0.5.0b3.dev97 contains a path traversal vulnerability caused by improper validation of archive entry names during password verification of certain encrypted 7z archives, letting attackers delete arbitrary files outside the extraction directory, exploit requires crafted encrypted 7z archive.

Severity & Score

Impact

Attackers can delete arbitrary files outside the extraction directory, potentially leading to data loss or system disruption.

Mitigation

Update to version 0.5.0b3.dev97 or later.

References

• https://github.com/pyload/pyload/security/advisories/GHSA-7g4m-8hx2-4qh3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner