CyberRota Analysis
AI-GeneratedThe Penelope Shell Handler prior to version 0.20.0 is vulnerable due to its use of tar.extractall() without proper path validation, enabling attackers to write files outside the designated download directory. This flaw could lead to unauthorized file overwrites, including critical configuration files like ~/.penelope/peneloperc. Organizations utilizing this tool for security testing should prioritize upgrading to version 0.20.0 to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download() implementation in penelope.py used tar.extractall(local_download_folder) on tar archives returned by remote sessions without validating member paths, allowing a malicious or compromised session to write files outside the intended download directory and potentially overwrite ~/.penelope/peneloperc. This issue is fixed in version 0.20.0.