diff --git a/packages/build-tools/package.json b/packages/build-tools/package.json
index a9840536a7..f1c9b7a397 100644
--- a/packages/build-tools/package.json
+++ b/packages/build-tools/package.json
@@ -68,7 +68,7 @@
     "resolve-from": "^5.0.0",
     "retry": "^0.13.1",
     "semver": "^7.6.2",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "9.0.1",
     "yaml": "^2.8.1",
     "zod": "^4.3.5"
diff --git a/packages/eas-cli/package.json b/packages/eas-cli/package.json
index 74216f9118..fbaa05a100 100644
--- a/packages/eas-cli/package.json
+++ b/packages/eas-cli/package.json
@@ -117,7 +117,7 @@
     "semver": "7.5.4",
     "set-interval-async": "3.0.3",
     "slash": "3.0.0",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "tar-stream": "3.1.7",
     "terminal-link": "2.1.1",
     "ts-deepmerge": "6.2.0",
diff --git a/packages/local-build-plugin/package.json b/packages/local-build-plugin/package.json
index c896567ac4..94e35185cd 100644
--- a/packages/local-build-plugin/package.json
+++ b/packages/local-build-plugin/package.json
@@ -39,7 +39,7 @@
     "lodash": "^4.17.21",
     "nullthrows": "^1.1.1",
     "semver": "^7.6.2",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "^9.0.1"
   },
   "devDependencies": {
diff --git a/packages/worker/package.json b/packages/worker/package.json
index 841e41c479..1dd07ea7c7 100644
--- a/packages/worker/package.json
+++ b/packages/worker/package.json
@@ -47,7 +47,7 @@
     "node-os-utils": "1.3.7",
     "nullthrows": "1.1.1",
     "semver": "7.6.3",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "3.4.0",
     "uuidv7": "1.1.0",
     "ws": "8.18.0",
diff --git a/yarn.lock b/yarn.lock
index 10a1ae7ed5..d48c835305 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2073,7 +2073,7 @@ __metadata:
     resolve-from: "npm:^5.0.0"
     retry: "npm:^0.13.1"
     semver: "npm:^7.6.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:^29.1.4"
     ts-mockito: "npm:^2.6.1"
     tslib: "npm:^2.6.3"
@@ -2762,7 +2762,7 @@ __metadata:
     nullthrows: "npm:1.1.1"
     semver: "npm:7.6.3"
     supertest: "npm:7.2.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:29.1.4"
     typescript: "npm:5.5.4"
     uuid: "npm:3.4.0"
@@ -10140,7 +10140,7 @@ __metadata:
     lodash: "npm:^4.17.21"
     nullthrows: "npm:^1.1.1"
     semver: "npm:^7.6.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:^29.1.4"
     typescript: "npm:^5.5.4"
     uuid: "npm:^9.0.1"
@@ -10279,7 +10279,7 @@ __metadata:
     semver: "npm:7.5.4"
     set-interval-async: "npm:3.0.3"
     slash: "npm:3.0.0"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     tar-stream: "npm:3.1.7"
     terminal-link: "npm:2.1.1"
     ts-deepmerge: "npm:6.2.0"
@@ -20262,16 +20262,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:7.5.7":
-  version: 7.5.7
-  resolution: "tar@npm:7.5.7"
+"tar@npm:7.5.8":
+  version: 7.5.8
+  resolution: "tar@npm:7.5.8"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/51f261afc437e1112c3e7919478d6176ea83f7f7727864d8c2cce10f0b03a631d1911644a567348c3063c45abdae39718ba97abb073d22aa3538b9a53ae1e31c
+  checksum: 10c0/8569db1b49f5d72084cbdcad9d2b39fcc115993186455aa052c1da0a2739b20e2d94af6a23609fc25d3ae63c9fed8b159f3b1d16b699e9ef25e3b8464603d153
   languageName: node
   linkType: hard