Red Hat Security Advisory

RHSA-2026:49716

RHEL AI 3.4 RPM runtime CVE fix - thrift

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AI 3.4 for RHEL 9 perl-thrift-0.24.0-1.el9ai, python3-thrift-0.24.0-1.el9ai, thrift-0.24.0-1.el9ai +3

TI-2026-40373 CVE-2026-55971 · GHSA-gwj4-q93m-wwqc

MEDIUM 50

Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00979 Published 2026-07-27 Fixed in 0.24.0 CWE-122