From f105ffb52c333d9d7a60528eaebc388ff28e1b30 Mon Sep 17 00:00:00 2001
From: tianM <46552064+a3384379@users.noreply.github.com>
Date: Wed, 23 Sep 2026 23:33:55 +0800
Subject: [PATCH 1/2] fix(workflows): keep reverted node edits and edge drafts
 isolated

---
 .../flow/WorkflowApiRequestEditor.test.tsx    | 116 ++++++++++++--
 .../src/flow/WorkflowNodeEditSession.test.tsx | 150 +++++++++++++-----
 frontend/src/flow/WorkflowNodeEditSession.tsx |  38 +++--
 frontend/src/flow/WorkflowNodeInspector.tsx   |   7 +-
 frontend/src/flow/editor/node-edit-session.ts |   1 +
 5 files changed, 247 insertions(+), 65 deletions(-)

diff --git a/frontend/src/flow/WorkflowApiRequestEditor.test.tsx b/frontend/src/flow/WorkflowApiRequestEditor.test.tsx
index c73e935f..938c239c 100644
--- a/frontend/src/flow/WorkflowApiRequestEditor.test.tsx
+++ b/frontend/src/flow/WorkflowApiRequestEditor.test.tsx
@@ -504,6 +504,51 @@ describe('WorkflowApiRequestEditor', () => {
     expect(session.unsafe.size).toBe(0)
   })
 
+  it('keeps an unfinished request draft when only an edge changes', async () => {
+    const user = userEvent.setup()
+    const session = new DraftSession()
+    const changed = vi.fn()
+    vi.mocked(getApiDetail).mockResolvedValue({
+      ...detail,
+      version: { ...detail.version, body_kind: 'json', body: { initial: true } },
+    })
+    render(<RequestSessionHarness session={session} changed={changed} startFullscreen />)
+    await screen.findByText('继承接口模板 v3')
+    await user.click(screen.getByRole('tab', { name: 'Body' }))
+    await user.click(within(screen.getByRole('tabpanel')).getByText('节点自定义'))
+    fireEvent.change(screen.getByRole('textbox', { name: 'JSON Body' }), {
+      target: { value: '{"pending":' },
+    })
+
+    await user.click(screen.getByRole('button', { name: '切换节点名称测试' }))
+    await user.click(screen.getByRole('button', { name: '切换节点名称测试' }))
+    expect([...session.nodeEditors.values()][0].requestDirty).toBe(true)
+    expect(session.unsafe.size).toBe(1)
+
+    await user.click(screen.getByRole('button', { name: '修改连线测试' }))
+    expect(screen.getByRole('textbox', { name: 'JSON Body' })).toHaveValue('{"pending":')
+    expect([...session.nodeEditors.values()][0].requestDraft).toMatchObject({
+      activeTab: 'body',
+      fields: { body_text: '{"pending":' },
+    })
+    expect(changed).toHaveBeenCalledTimes(1)
+    expect(changed.mock.calls[0][0].nodes[0]).toEqual({
+      ...node,
+      config: { ...node.config, request_overrides: {} },
+    })
+
+    fireEvent.change(screen.getByRole('textbox', { name: 'JSON Body' }), {
+      target: { value: '{"ready":true}' },
+    })
+    await user.click(screen.getByRole('button', { name: '保存节点配置' }))
+    await waitFor(() => expect(changed).toHaveBeenCalledTimes(2))
+    expect(changed.mock.calls[1][0].edges).toEqual(changed.mock.calls[0][0].edges)
+    expect(changed.mock.calls[1][0].nodes[0].config.request_overrides.body).toEqual({
+      kind: 'json',
+      value: { ready: true },
+    })
+  })
+
   it('applies request edits after restoring the fullscreen inspector to quick mode', async () => {
     const user = userEvent.setup()
     const session = new DraftSession()
@@ -666,20 +711,63 @@ function RequestSessionHarness({
               <InspectorPresentationContext.Provider value={presentation}>
                 <button
                   onClick={() =>
-                    update({
-                      ...definition,
-                      nodes: [
-                        restoreEditedNode(draft, {
-                          ...editorNode(draft),
-                          config: {
-                            ...editorNode(draft).config,
-                            api_definition_id: 'api-2',
-                            api_version: 2,
-                            request_overrides: {},
+                    update(
+                      {
+                        ...definition,
+                        nodes: [
+                          restoreEditedNode(draft, {
+                            ...editorNode(draft),
+                            name: draft.name === node.name ? '临时名称' : node.name,
+                          }),
+                        ],
+                      },
+                      'node',
+                    )
+                  }
+                >
+                  切换节点名称测试
+                </button>
+                <button
+                  onClick={() =>
+                    update(
+                      {
+                        ...definition,
+                        edges: [
+                          ...definition.edges,
+                          {
+                            id: 'audit-edge',
+                            source: 'start',
+                            target: draft.id,
+                            condition: null,
+                            mappings: [],
                           },
-                        }),
-                      ],
-                    })
+                        ],
+                      },
+                      'edges',
+                    )
+                  }
+                >
+                  修改连线测试
+                </button>
+                <button
+                  onClick={() =>
+                    update(
+                      {
+                        ...definition,
+                        nodes: [
+                          restoreEditedNode(draft, {
+                            ...editorNode(draft),
+                            config: {
+                              ...editorNode(draft).config,
+                              api_definition_id: 'api-2',
+                              api_version: 2,
+                              request_overrides: {},
+                            },
+                          }),
+                        ],
+                      },
+                      'node',
+                    )
                   }
                 >
                   切换接口测试
@@ -692,7 +780,7 @@ function RequestSessionHarness({
                   artifacts={[artifact]}
                   editable
                   onUpdate={(updated) =>
-                    update({ ...definition, nodes: [restoreEditedNode(draft, updated)] })
+                    update({ ...definition, nodes: [restoreEditedNode(draft, updated)] }, 'node')
                   }
                 />
               </InspectorPresentationContext.Provider>
diff --git a/frontend/src/flow/WorkflowNodeEditSession.test.tsx b/frontend/src/flow/WorkflowNodeEditSession.test.tsx
index 4be48640..ef7fb091 100644
--- a/frontend/src/flow/WorkflowNodeEditSession.test.tsx
+++ b/frontend/src/flow/WorkflowNodeEditSession.test.tsx
@@ -6,6 +6,7 @@ import { workflowDefinition } from '../test/fixtures'
 import type { WorkflowDefinition } from '../lib/api'
 import WorkflowNodeEditSession from './WorkflowNodeEditSession'
 import WorkflowJsonInput from './WorkflowJsonInput'
+import { editorNode, restoreEditedNode } from './editor/graph-analysis'
 
 function Harness({
   session,
@@ -37,31 +38,34 @@ function Harness({
               <button
                 key={operation}
                 onClick={() =>
-                  update({
-                    ...definition,
-                    edges: definition.edges.map((edge, index) =>
-                      index === 0
-                        ? {
-                            ...edge,
-                            mappings:
-                              operation === 'delete'
-                                ? []
-                                : [
-                                    ...(operation === 'add' ? edge.mappings : []),
-                                    {
-                                      transform: { kind: 'identity' as const, template: '' },
-                                      source: { node_id: edge.source, path: operation },
-                                      target: {
-                                        node_id: edge.target,
-                                        location: 'body',
-                                        key: 'value',
+                  update(
+                    {
+                      ...definition,
+                      edges: definition.edges.map((edge, index) =>
+                        index === 0
+                          ? {
+                              ...edge,
+                              mappings:
+                                operation === 'delete'
+                                  ? []
+                                  : [
+                                      ...(operation === 'add' ? edge.mappings : []),
+                                      {
+                                        transform: { kind: 'identity' as const, template: '' },
+                                        source: { node_id: edge.source, path: operation },
+                                        target: {
+                                          node_id: edge.target,
+                                          location: 'body',
+                                          key: 'value',
+                                        },
                                       },
-                                    },
-                                  ],
-                          }
-                        : edge,
-                    ),
-                  })
+                                    ],
+                            }
+                          : edge,
+                      ),
+                    },
+                    'edges',
+                  )
                 }
               >
                 {operation} mapping
@@ -71,29 +75,43 @@ function Harness({
               aria-label="节点名称"
               value={draft.name}
               onChange={(event) =>
-                update({
-                  ...definition,
-                  nodes: definition.nodes.map((item) =>
-                    item.id === draft.id ? { ...draft, name: event.target.value } : item,
-                  ),
-                })
+                update(
+                  {
+                    ...definition,
+                    nodes: definition.nodes.map((item) =>
+                      item.id === draft.id
+                        ? restoreEditedNode(draft, {
+                            ...editorNode(draft),
+                            name: event.target.value,
+                          })
+                        : item,
+                    ),
+                  },
+                  'node',
+                )
               }
             />
             <label>
               请求 JSON
               <WorkflowJsonInput
                 fieldKey="payload"
-                value={draft.config.payload ?? {}}
+                value={editorNode(draft).config.payload ?? {}}
                 editable
                 onChange={(payload) =>
-                  update({
-                    ...definition,
-                    nodes: definition.nodes.map((item) =>
-                      item.id === draft.id
-                        ? { ...draft, config: { ...draft.config, payload } }
-                        : item,
-                    ),
-                  })
+                  update(
+                    {
+                      ...definition,
+                      nodes: definition.nodes.map((item) =>
+                        item.id === draft.id
+                          ? restoreEditedNode(draft, {
+                              ...editorNode(draft),
+                              config: { ...editorNode(draft).config, payload },
+                            })
+                          : item,
+                      ),
+                    },
+                    'node',
+                  )
                 }
               />
             </label>
@@ -104,6 +122,44 @@ function Harness({
   )
 }
 describe('node edit transactions', () => {
+  it.each(['api', 'capability'] as const)(
+    'keeps the last input when a %s node name returns to its applied value',
+    (type) => {
+      const base = workflowDefinition.nodes[1]
+      const original =
+        type === 'api'
+          ? base
+          : {
+              ...base,
+              type: 'capability' as const,
+              capability_id: 'http.request',
+              capability_version: '2.0.0',
+              configuration: base.config,
+              config: { legacy: true },
+            }
+      const initial = {
+        ...workflowDefinition,
+        nodes: workflowDefinition.nodes.map((item) => (item.id === base.id ? original : item)),
+      }
+      const session = new DraftSession()
+      const changed = vi.fn()
+      render(<Harness session={session} changed={changed} external={initial} />)
+
+      fireEvent.change(screen.getByLabelText('节点名称'), { target: { value: '等待2' } })
+      fireEvent.change(screen.getByLabelText('节点名称'), { target: { value: base.name } })
+
+      expect(screen.getByLabelText('节点名称')).toHaveValue(base.name)
+      expect([...session.nodeEditors.values()][0].draftNode.name).toBe(base.name)
+      expect(session.unsafe.size).toBe(0)
+      expect(screen.getByRole('button', { name: '丢弃修改' })).toBeDisabled()
+      fireEvent.change(screen.getByLabelText(/请求 JSON/), {
+        target: { value: '{"saved":true}' },
+      })
+      fireEvent.click(screen.getByRole('button', { name: '应用节点配置' }))
+      expect(changed).toHaveBeenCalledTimes(1)
+      expect(changed.mock.calls[0][0].nodes[1]).toMatchObject({ name: base.name, type })
+    },
+  )
   it.each(['edit', 'add', 'delete'] as const)(
     'preserves unapplied node fields during %s mapping',
     async (operation) => {
@@ -149,6 +205,22 @@ describe('node edit transactions', () => {
       expect(changed.mock.calls[1][0].edges).toEqual(changed.mock.calls[0][0].edges)
     },
   )
+  it('retains an unfinished JSON input when an edge changes', () => {
+    const session = new DraftSession()
+    const changed = vi.fn()
+    render(<Harness session={session} changed={changed} />)
+    fireEvent.change(screen.getByLabelText(/请求 JSON/), { target: { value: '{"pending":' } })
+    fireEvent.click(screen.getByRole('button', { name: 'add mapping' }))
+
+    expect(screen.getByLabelText(/请求 JSON/)).toHaveValue('{"pending":')
+    expect([...session.nodeEditors.values()][0].rawFields.payload).toMatchObject({
+      text: '{"pending":',
+      error: '请检查引号、逗号与括号是否完整。',
+    })
+    expect(changed).toHaveBeenCalledTimes(1)
+    fireEvent.click(screen.getByRole('button', { name: '应用节点配置' }))
+    expect(changed).toHaveBeenCalledTimes(1)
+  })
   it('rebases a clean form after undo and permits a subsequent edit', async () => {
     const changed = vi.fn()
     render(<Harness session={new DraftSession()} changed={changed} />)
diff --git a/frontend/src/flow/WorkflowNodeEditSession.tsx b/frontend/src/flow/WorkflowNodeEditSession.tsx
index 41477bb4..5c4f54c2 100644
--- a/frontend/src/flow/WorkflowNodeEditSession.tsx
+++ b/frontend/src/flow/WorkflowNodeEditSession.tsx
@@ -9,6 +9,7 @@ import {
   type WorkflowNodeEditorDraft,
   type WorkflowRequestEditorDraft,
   type WorkflowRequestIdentity,
+  type WorkflowNodeEditKind,
 } from './editor/node-edit-session'
 import { jsonEqual } from './editor/editor-types'
 import {
@@ -23,6 +24,17 @@ function nodeContent(node: WorkflowNode): Omit<WorkflowNode, 'position'> {
   void _position
   return content
 }
+function hasPendingNodeEdits(
+  draft: WorkflowNodeEditorDraft,
+  updated: WorkflowNode,
+  targetChanged: boolean,
+): boolean {
+  return (
+    !jsonEqual(nodeContent(updated), nodeContent(draft.baseNode)) ||
+    Object.keys(draft.rawFields).length > 0 ||
+    (!targetChanged && draft.requestDirty)
+  )
+}
 export default function WorkflowNodeEditSession({
   scope,
   projectId = '',
@@ -38,7 +50,10 @@ export default function WorkflowNodeEditSession({
   definition: WorkflowDefinition
   editable: boolean
   onChange: (definition: WorkflowDefinition) => void
-  children: (node: WorkflowNode, update: (definition: WorkflowDefinition) => void) => ReactNode
+  children: (
+    node: WorkflowNode,
+    update: (definition: WorkflowDefinition, kind: WorkflowNodeEditKind) => void,
+  ) => ReactNode
 }) {
   const session = useDraftSession()
   const key = `${scope}${encodeURIComponent(node.id)}`
@@ -204,18 +219,20 @@ export default function WorkflowNodeEditSession({
     update({
       ...latest.current,
       draftNode: updated,
-      dirty: true,
+      dirty: hasPendingNodeEdits(previous, updated, targetChanged),
       ...(targetChanged
         ? { requestDraft: null, requestDirty: false, generation: session.nextGeneration() }
         : {}),
     })
     setError(null)
   }
-  function updateDefinition(next: WorkflowDefinition) {
-    const updated = next.nodes.find((item) => item.id === node.id)
-    const current = definition.nodes.find((item) => item.id === node.id)
-    if (updated && !jsonEqual(updated, current)) void updateNode(updated)
-    if (!jsonEqual(next.edges, definition.edges)) onChange({ ...definition, edges: next.edges })
+  function updateDefinition(next: WorkflowDefinition, kind: WorkflowNodeEditKind) {
+    if (kind === 'node') {
+      const updated = next.nodes.find((item) => item.id === node.id)
+      if (updated && !jsonEqual(updated, latest.current.draftNode)) void updateNode(updated)
+    } else if (!jsonEqual(next.edges, definition.edges)) {
+      onChange({ ...definition, edges: next.edges })
+    }
   }
   return (
     <NodeEditContext.Provider
@@ -261,9 +278,12 @@ function SessionContent({
   node,
   onChange,
 }: {
-  render: (node: WorkflowNode, update: (definition: WorkflowDefinition) => void) => ReactNode
+  render: (
+    node: WorkflowNode,
+    update: (definition: WorkflowDefinition, kind: WorkflowNodeEditKind) => void,
+  ) => ReactNode
   node: WorkflowNode
-  onChange: (definition: WorkflowDefinition) => void
+  onChange: (definition: WorkflowDefinition, kind: WorkflowNodeEditKind) => void
 }) {
   return render(node, onChange)
 }
diff --git a/frontend/src/flow/WorkflowNodeInspector.tsx b/frontend/src/flow/WorkflowNodeInspector.tsx
index 93de183f..fedf5118 100644
--- a/frontend/src/flow/WorkflowNodeInspector.tsx
+++ b/frontend/src/flow/WorkflowNodeInspector.tsx
@@ -36,6 +36,7 @@ import {
 } from '../features/service-targets/service-target-service'
 import WorkflowApiRequestEditor from './WorkflowApiRequestEditor'
 import { useInspectorPresentation } from './editor/inspector-presentation'
+import type { WorkflowNodeEditKind } from './editor/node-edit-session'
 
 type InspectorProps = {
   projectId?: string | null
@@ -50,7 +51,7 @@ type InspectorProps = {
   grpcDescriptors?: SchemaArtifact[]
   eventSources?: EventSource[]
   editable: boolean
-  onChange: (definition: WorkflowDefinition) => void
+  onChange: (definition: WorkflowDefinition, kind: WorkflowNodeEditKind) => void
   onDelete: () => void
 }
 
@@ -74,7 +75,7 @@ export default function WorkflowNodeInspector({
   if (!originalNode) return <EmptyInspector />
   const node = editorNode(originalNode)
   const updateNode = (updated: WorkflowNode) =>
-    onChange(replaceNode(definition, restoreEditedNode(originalNode, updated)))
+    onChange(replaceNode(definition, restoreEditedNode(originalNode, updated)), 'node')
   return (
     <aside
       className={`workflow-inspector workflow-node-configuration${presentation === 'fullscreen' ? ' is-fullscreen' : ''}`}
@@ -110,7 +111,7 @@ export default function WorkflowNodeInspector({
             node={node}
             definition={definition}
             editable={editable}
-            onChange={onChange}
+            onChange={(next) => onChange(next, 'edges')}
           />
         )}
       </div>
diff --git a/frontend/src/flow/editor/node-edit-session.ts b/frontend/src/flow/editor/node-edit-session.ts
index 269581c5..ee4efa37 100644
--- a/frontend/src/flow/editor/node-edit-session.ts
+++ b/frontend/src/flow/editor/node-edit-session.ts
@@ -29,6 +29,7 @@ export type WorkflowRequestIdentity = {
   apiVersion: number
 }
 export type RawFieldDraft = { text: string; error: string | null }
+export type WorkflowNodeEditKind = 'node' | 'edges'
 export type WorkflowNodeEditorDraft = {
   nodeId: string
   baseNode: WorkflowNode

From ec6055047a420b3703d9b098eafff6074071d7a2 Mon Sep 17 00:00:00 2001
From: tianM <46552064+a3384379@users.noreply.github.com>
Date: Thu, 24 Sep 2026 00:01:32 +0800
Subject: [PATCH 2/2] fix(security): backport CPython tarfile CVE fix into
 runtime image

---
 .grype.yaml                                   |  5 ++
 backend/Dockerfile                            |  7 ++
 .../patches/cpython-3.13-cve-2026-82049.patch | 74 +++++++++++++++++++
 3 files changed, 86 insertions(+)
 create mode 100644 backend/patches/cpython-3.13-cve-2026-82049.patch

diff --git a/.grype.yaml b/.grype.yaml
index 8fbbcafd..84b1046a 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -11,3 +11,8 @@ ignore:
     package: { name: python, version: 3.13.15, type: binary }
   - vulnerability: CVE-2026-15308
     package: { name: python, version: 3.13.15, type: binary }
+  # The Dockerfile applies python/cpython@b8f23e307097552eaea2604383a12ab280520d0d
+  # and runs its regression test before installation. Grype still identifies
+  # the patched runtime by its unchanged 3.13.15 version string.
+  - vulnerability: CVE-2026-82049
+    package: { name: python, version: 3.13.15, type: binary }
diff --git a/backend/Dockerfile b/backend/Dockerfile
index be052c6e..42767ed2 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -128,6 +128,8 @@ RUN set -eux; \
 
 FROM debian:trixie-slim AS python-runtime
 
+COPY patches/cpython-3.13-cve-2026-82049.patch /tmp/cpython-3.13-cve-2026-82049.patch
+
 ENV PATH="/usr/local/bin:$PATH" \
     PYTHON_VERSION="3.13.15" \
     PYTHON_SHA256="1e66a7945a48390ee4c2a4268a0e4185884059a13c4aab6d148aa208deea4a76"
@@ -156,6 +158,7 @@ RUN set -eux; \
         libssl-dev \
         make \
         netbase \
+        patch \
         tk-dev \
         tzdata \
         uuid-dev \
@@ -176,6 +179,9 @@ RUN set -eux; \
     mkdir -p /usr/src/python; \
     tar --extract --directory /usr/src/python --strip-components=1 --file python.tar.xz; \
     rm python.tar.xz; \
+    patch --directory=/usr/src/python --strip=1 \
+        < /tmp/cpython-3.13-cve-2026-82049.patch; \
+    rm /tmp/cpython-3.13-cve-2026-82049.patch; \
     cd /usr/src/python; \
     build_arch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; \
     ./configure \
@@ -186,6 +192,7 @@ RUN set -eux; \
         --enable-shared \
         --with-ensurepip; \
     make -j "$(nproc)"; \
+    LD_LIBRARY_PATH=. ./python -m test -m test_sneaky_hardlink_relocation test_tarfile; \
     make install; \
     cd /; \
     rm -rf /usr/src/python; \
diff --git a/backend/patches/cpython-3.13-cve-2026-82049.patch b/backend/patches/cpython-3.13-cve-2026-82049.patch
new file mode 100644
index 00000000..8189a528
--- /dev/null
+++ b/backend/patches/cpython-3.13-cve-2026-82049.patch
@@ -0,0 +1,74 @@
+From b8f23e307097552eaea2604383a12ab280520d0d Mon Sep 17 00:00:00 2001
+From: Stan Ulbrych <stan@python.org>
+Date: Thu, 10 Sep 2026 11:06:35 +0100
+Subject: [PATCH] [3.13] gh-157190: Fix tarfile `data`/`tar` filter bypass via
+ hard link to a symlink (GH-157191)  (GH-157192)
+
+(cherry picked from commit 480ea4aab898291132c071645ec9ef26dab69def)
+The backport to 3.13 and below includes a NEWS entry.
+
+Co-authored-by: Stan Ulbrych <stan@python.org>
+---
+ Lib/tarfile.py                                 |  6 +++++-
+ Lib/test/test_tarfile.py                       | 18 ++++++++++++++++++
+ ...6-09-06-11-02-46.gh-issue-157190.tarhln.rst |  5 +++++
+ 3 files changed, 28 insertions(+), 1 deletion(-)
+ create mode 100644 Misc/NEWS.d/next/Security/2026-09-06-11-02-46.gh-issue-157190.tarhln.rst
+
+diff --git a/Lib/tarfile.py b/Lib/tarfile.py
+index 3c59eac5d9a0f11..e68d7bbf3afb79c 100755
+--- a/Lib/tarfile.py
++++ b/Lib/tarfile.py
+@@ -2738,7 +2738,11 @@ def makelink_with_filter(self, tarinfo, targetpath,
+                     if os.path.lexists(targetpath):
+                         # Avoid FileExistsError on following os.link.
+                         os.unlink(targetpath)
+-                    os.link(tarinfo._link_target, targetpath)
++                    # Resolve the target so the hard link points to the file
++                    # itself. Otherwise os.link() may duplicate a symlink to a
++                    # shallower location, where it's relative target escapes the
++                    # destination directory. (CVE-2026-82049)
++                    os.link(os.path.realpath(tarinfo._link_target), targetpath)
+                     return
+         except symlink_exception:
+             keyerror_to_extracterror = True
+diff --git a/Lib/test/test_tarfile.py b/Lib/test/test_tarfile.py
+index 86fe8efac2e3495..34e9fb587725cb3 100644
+--- a/Lib/test/test_tarfile.py
++++ b/Lib/test/test_tarfile.py
+@@ -4452,6 +4452,24 @@ def test_sneaky_hardlink_fallback_deep(self):
+                     self.expect_file("a/b/s", symlink_to=os.path.join('..', 'escape'))
+                     self.expect_file("s", symlink_to=os.path.join('..', 'escape'))
+ 
++    @symlink_test
++    @os_helper.skip_unless_hardlink
++    def test_sneaky_hardlink_relocation(self):
++        with ArchiveMaker() as arc:
++            arc.add("a/escape", content="decoy")
++            arc.add("a/b/s", symlink_to=os.path.join("..", "escape"))
++            arc.add("s", hardlink_to=os.path.join("a", "b", "s"))
++
++        for filter in 'data', 'tar':
++            with self.subTest(filter), self.check_context(arc.open(), filter):
++                self.expect_file("a/escape", content="decoy")
++                if os_helper.can_symlink():
++                    self.expect_file("a/b/s", symlink_to=os.path.join('..', 'escape'))
++                else:
++                    self.expect_file("a/b/s", content="decoy")
++                self.expect_file("s", content="decoy")
++                self.assertFalse((self.destdir / "s").is_symlink())
++
+     @symlink_test
+     def test_exfiltration_via_symlink(self):
+         # (CVE-2025-4138)
+diff --git a/Misc/NEWS.d/next/Security/2026-09-06-11-02-46.gh-issue-157190.tarhln.rst b/Misc/NEWS.d/next/Security/2026-09-06-11-02-46.gh-issue-157190.tarhln.rst
+new file mode 100644
+index 000000000000000..3dffa3bf5b5a5a8
+--- /dev/null
++++ b/Misc/NEWS.d/next/Security/2026-09-06-11-02-46.gh-issue-157190.tarhln.rst
+@@ -0,0 +1,5 @@
++Fixed a vulnerability in the :mod:`tarfile` ``data`` and ``tar`` extraction
++filters where a crafted archive using a hard link to a symbolic link could
++change the permissions and modification time of a file outside the
++destination directory, and expose its contents inside the extracted tree.
++This addresses :cve:`2026-82049`.