CVE-2025-59682 | Django up to 4.2.24/5.1.12/5.2.6 archive.extract path traversal

October 1, 2025 Yanac

A vulnerability was found in Django up to 4.2.24/5.1.12/5.2.6. It has been declared as critical. Affected by this issue is the function archive.extract. Executing manipulation can lead to path traversal.

This vulnerability appears as CVE-2025-59682. The attacker needs to be present on the local network. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More