Read the docs
TI-2026-00748 Aliases CVE-2026-0994GHSA-7gcm-g887-7qv7

Denial of Service in Python Protobuf

Priority MEDIUM 43CWE-674Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-674.

Summary

A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages. Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00712 53rd percentileScored 2026-11-07
Fix Fixed protobuf (PyPI): 6.33.5, 5.29.6Red Hat: 17 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
python-pillowProtobufup to v33.4—No fix listedCNA
—protobuf (PyPI)6.30.0rc1 to before 6.33.56.33.5Patch availableGHSA-7gcm-g887-7qv7
—protobuf (PyPI)before 5.29.65.29.6Patch availableGHSA-7gcm-g887-7qv7
  • Protobuf Vendorpython-pillow Affected up to v33.4 Fixed in — No fix listed CNA
  • protobuf (PyPI) Vendor— Affected 6.30.0rc1 to before 6.33.5 Fixed in 6.33.5 Patch available GHSA-7gcm-g887-7qv7
  • protobuf (PyPI) Vendor— Affected before 5.29.6 Fixed in 5.29.6 Patch available GHSA-7gcm-g887-7qv7

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:*up to 33.4VulnerableGoogle
  • cpe:2.3:a:google:protobuf:*:*:*:*:*:*:*:* Versions up to 33.4 Vulnerable ·Google

Remediation

  • Fix · GHSA-7gcm-g887-7qv7 protobuf (PyPI) Fixed in 6.33.5 Advisory →
  • Fix · GHSA-7gcm-g887-7qv7 protobuf (PyPI) Fixed in 5.29.6 Advisory →

Red Hat 17 advisories

  • RHSA-2026:61629 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:61627 Released 2026-08-31 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:16174 Released 2026-05-12 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.3 (Spyre)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-spyre-rhel9
Show 14 more Red Hat advisories
  • RHSA-2026:8748 Released 2026-04-17 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.3.1 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:8746 Released 2026-04-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.1 (CUDA)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:8747 Released 2026-04-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.3.1 (ROCm)
    • Red Hat AI Inference Server 3.3 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:3959 Released 2026-03-06 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-4.6.26-1.el8ap, automation-controller-cli-4.6.26-1.el8ap, automation-controller-server-4.6.26-1.el8ap +10
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-4.6.26-1.el9ap, automation-controller-cli-4.6.26-1.el9ap, automation-controller-server-4.6.26-1.el9ap +10
  • RHSA-2026:3958 Released 2026-03-06 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.3-4.el10ap, receptorctl-1.6.3-4.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.9-1.el9ap, automation-controller-cli-4.7.9-1.el9ap, automation-controller-server-4.7.9-1.el9ap +8
  • RHSA-2026:3462 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:3461 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:3219 Released 2026-02-24 · Red Hat rating Important
    protobuf security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) protobuf-compiler-3.14.0-16.el9_6.1, protobuf-devel-3.14.0-16.el9_6.1, protobuf-lite-devel-3.14.0-16.el9_6.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) protobuf-3.14.0-16.el9_6.1, protobuf-lite-3.14.0-16.el9_6.1, python3-protobuf-3.14.0-16.el9_6.1
  • RHSA-2026:3220 Released 2026-02-24 · Red Hat rating Important
    protobuf security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) protobuf-3.14.0-13.el9_2.1, protobuf-lite-3.14.0-13.el9_2.1, python3-protobuf-3.14.0-13.el9_2.1
  • RHSA-2026:3218 Released 2026-02-24 · Red Hat rating Important
    protobuf security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) protobuf-3.19.6-11.el10_0.1, protobuf-lite-3.19.6-11.el10_0.1, python3-protobuf-3.19.6-11.el10_0.1
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) protobuf-compiler-3.19.6-11.el10_0.1, protobuf-devel-3.19.6-11.el10_0.1, protobuf-lite-devel-3.19.6-11.el10_0.1
  • RHSA-2026:3095 Released 2026-02-23 · Red Hat rating Important
    protobuf security update
    • Red Hat Enterprise Linux AppStream (v. 9) protobuf-3.14.0-17.el9_7, protobuf-lite-3.14.0-17.el9_7, python3-protobuf-3.14.0-17.el9_7
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) protobuf-compiler-3.14.0-17.el9_7, protobuf-devel-3.14.0-17.el9_7, protobuf-lite-devel-3.14.0-17.el9_7
  • RHSA-2026:3097 Released 2026-02-23 · Red Hat rating Important
    protobuf security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) protobuf-3.14.0-9.el9_0.1, protobuf-lite-3.14.0-9.el9_0.1, python3-protobuf-3.14.0-9.el9_0.1
  • RHSA-2026:3094 Released 2026-02-23 · Red Hat rating Important
    protobuf security update
    • Red Hat Enterprise Linux AppStream (v. 10) protobuf-3.19.6-15.el10_1, protobuf-lite-3.19.6-15.el10_1, python3-protobuf-3.19.6-15.el10_1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) protobuf-compiler-3.19.6-15.el10_1, protobuf-devel-3.19.6-15.el10_1, protobuf-lite-devel-3.19.6-15.el10_1
  • RHSA-2026:3059 Released 2026-02-23 · Red Hat rating Important
    protobuf security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) protobuf-compiler-3.14.0-13.el9_4.1, protobuf-devel-3.14.0-13.el9_4.1, protobuf-lite-devel-3.14.0-13.el9_4.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) protobuf-3.14.0-13.el9_4.1, protobuf-lite-3.14.0-13.el9_4.1, python3-protobuf-3.14.0-13.el9_4.1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat AI Inference Server 3.2Fixed RHSA-2026:3461, RHSA-2026:3462, RHSA-2026:61627, RHSA-2026:61629
Red Hat AI Inference Server 3.3Fixed RHSA-2026:16174, RHSA-2026:8746, RHSA-2026:8747, RHSA-2026:8748
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:3959
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:3959
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:3958
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2026:3059
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:3219
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:3094
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:3095
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:3097
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:3220
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:3218
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:3059
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:3219
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:3094
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:3095
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:3218
Not affected: 8 products
  • Red Hat AMQ Clients
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Hardened Images
  • Red Hat OpenStack Platform 16.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-0994
  2. 2026-10-03 Alias added: GHSA-7gcm-g887-7qv7

References

Patch 1

Advisory 1

Other 4

  • TI-2016-01993 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other… CVSS 3.1HIGH 7.5
  • TI-2022-24108 An XML External Entity (XXE) issue was discovered in Python through 3.9.1. CVSS 3.1CRITICAL 9.8
  • TI-2022-17508 The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and… CVSS 3.1CRITICAL 9.8
  • TI-2021-02254 Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c… CVSS 3.1CRITICAL 9.8
  • TI-2007-04413 Directory traversal vulnerability in the (1) extract and (2) extractall functions in the… CVSS 3.1CRITICAL 9.8
  • TI-2026-76627 Out-of-bounds read in Pillow TIFF encoder ColorMap handling CVSS 4.0HIGH 8.8
See all 318 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences