Skip to content
OpenAdvisories

Package · PyPI

penelope-shell-handler

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-50558

    Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive

    Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download() implementation in penelope.py used tar.extractall(local_download_folder) on tar archives returned by remote sessions without vali…

    brightio penelope penelope-shell-handler PyPI