Executive brief
BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
Affected products
- PyPI bbot
Junglewise Threat Intelligence
CVE-2025-10284: PYSEC-2026-292 - BBOT's various issues in unarchive.py can cause arbitrary file write and RCE
CVE-2025-10284 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: bbot (PyPI). Vendors: PyPI.
Related threats
- Black Lantern Security BBOT path traversal in github_workflows module
- Black Lantern Security BBOT symbolic link bypass in unarchive module
- PYSEC-2026-1217 - BBOT's gitlab.py exposes globally configured "gitlab" API key
- PYSEC-2026-293 - BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE
- Black Lantern Security BBOT path traversal in postman_download module