diff --git a/release/tune_tests/cloud_tests/workloads/run_cloud_test.py b/release/tune_tests/cloud_tests/workloads/run_cloud_test.py
index ca3f76bfb0..b1246971c5 100644
--- a/release/tune_tests/cloud_tests/workloads/run_cloud_test.py
+++ b/release/tune_tests/cloud_tests/workloads/run_cloud_test.py
@@ -403,7 +403,26 @@ def _unpack(stream: str, dir: str):
             f.write(stream)
 
         with tarfile.open(tmpfile) as tar:
-            tar.extractall(dir)
+            def is_within_directory(directory, target):
+            	
+            	abs_directory = os.path.abspath(directory)
+            	abs_target = os.path.abspath(target)
+            
+            	prefix = os.path.commonprefix([abs_directory, abs_target])
+            	
+            	return prefix == abs_directory
+            
+            def safe_extract(tar, path=".", members=None, *, numeric_owner=False):
+            
+            	for member in tar.getmembers():
+            		member_path = os.path.join(path, member.name)
+            		if not is_within_directory(path, member_path):
+            			raise Exception("Attempted Path Traversal in Tar File")
+            
+            	tar.extractall(path, members, numeric_owner=numeric_owner) 
+            	
+            
+            safe_extract(tar, dir)
 
     try:
         packed = ray.get(