{"id":"CVE-2026-71283","published":"2026-08-05T13:24:52.970","lastModified":"2026-08-10T12:17:30.903","description":"Fledge's backup-restore upload handler, upload_backup (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. Requires the admin role (@has_permission(\"admin\")).","cvssScore":4.9,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://github.com/fledge-iot/fledge","tags":[]},{"url":"https://github.com/fledge-iot/fledge/blob/main/python/fledge/services/core/api/backup_restore.py","tags":[]}],"exploitRefs":[{"url":"https://github.com/fledge-iot/fledge","tags":[]},{"url":"https://github.com/fledge-iot/fledge/blob/main/python/fledge/services/core/api/backup_restore.py","tags":[]}],"hasPoc":true,"ai":null}