What is CVE-2026-82049?

CVE-2026-82049 is a security advisory published by Microsoft Security Response Center (MSRC) with Medium severity. tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Which CVE IDs does CVE-2026-82049 cover?

CVE-2026-82049 covers the following CVE IDs: CVE-2026-82049. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2026-82049?

CVE-2026-82049 affects 2 products, including: azl3 python3 3.12.14-1 on Azure Linux 3.0; azl3 python3 3.12.14-2 on Azure Linux 3.0.

CVE-2026-82049Medium

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

Vendor

Microsoft Security Response Center (MSRC)

Published

September 17, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-82049 →

🎯 Affected products2

azl3 python3 3.12.14-1 on Azure Linux 3.0
azl3 python3 3.12.14-2 on Azure Linux 3.0

✅ Remediation

Security Update KBRelease Notes (Security Update)

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-82049
patchhttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade