# CPython: [CVE-2026-115791] Prevent shadowing stdlib in gzip/tarfile/zipfile CLI

Source: [Open Source Security](https://seclists.org/oss-sec/2026/q4/648) · 2026-11-10 · Security
Page: https://themorning.dev/story/cpython-cve-2026-115791-prevent-shadowing-stdlib-in-gzip-tarfile-zipfile-cli-268c39ee55a69207
Kind: security · Impact: medium

## In brief

- CPython fixed the gzip, tarfile and zipfile command-line interfaces so they no longer shadow standard library modules.
- The issue is tracked as CVE-2026-115791 and was announced on the Security-announce list on 2026-11-10.

## Why it matters

Developers who run these CLI tools from directories containing untrusted files could have the wrong module loaded instead of the standard library version.

## What to do

- Upgrade CPython to a release that includes the fix for CVE-2026-115791

## CVEs

- CVE-2026-115791

## Timeline

- 2026-11-10: Fix for stdlib shadowing in gzip/tarfile/zipfile CLI announced to the Security-announce list

## Coverage

- [CPython: [CVE-2026-115791] Prevent shadowing stdlib in gzip/tarfile/zipfile CLI](https://seclists.org/oss-sec/2026/q4/648) — Open Source Security, 2026-11-10

Tags: python, cpython, security, stdlib, cve

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev