Read the docs
TI-2026-10297 Aliases CVE-2026-11940GHSA-9mc4-rqmq-h467

tarfile extraction filter bypass allows escaping the destination directory

Priority MEDIUM 41CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · None
Fix status
Partial Red Hat: 36 fixed, 2 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting a relative target the filter judged contained escape the destination directory.  This allowed a malicious tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads or writes. This was an incomplete fix of CVE-2025-4330.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0075 55th percentileScored 2026-11-07
Fix Partial CPython (Python Software Foundation): 3.10.21, 3.11.16, 3.12.14 +3Red Hat: 100 advisoriesRed Hat: 36 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Python Software FoundationCPythonbefore 3.10.21; 3.11.0 to before 3.11.16; 3.12.0 to before 3.12.14; 3.13.0 to before 3.13.15; 3.14.0 to before 3.14.7; 3.15.0a1 to before 3.15.0b43.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7, 3.15.0b4Patch availableCNA
  • CPython VendorPython Software Foundation Affected before 3.10.21; 3.11.0 to before 3.11.16; 3.12.0 to before 3.12.14; 3.13.0 to before 3.13.15; 3.14.0 to before 3.14.7; 3.15.0a1 to before 3.15.0b4 Fixed in 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7, 3.15.0b4 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*——python-pillow
  • cpe:2.3:a:python:python:*:*:*:*:*:*:*:* Versions — — ·python-pillow

Remediation

  • Fix · CNA CPython (Python Software Foundation) Fixed in 3.10.21, 3.11.16, 3.12.14, 3.13.15, 3.14.7, 3.15.0b4

Red Hat 100 advisories

  • RHSA-2026:92452 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
  • RHSA-2026:92449 Released 2026-10-29 · Red Hat rating Critical
    Red Hat Enterprise Linux AI 3.5.2 enhancement update
    • Red Hat Enterprise Linux AI 3.5 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
  • RHSA-2026:82415 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cpu)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cpu-rhel9
Show 97 more Red Hat advisories
  • RHSA-2026:82371 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (spyre)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
  • RHSA-2026:82368 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (cuda)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-cuda-rhel9
  • RHSA-2026:82066 Released 2026-10-13 · Red Hat rating Important
    Red Hat AI Inference Model Optimization Tools 3.5.2 (CUDA)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/model-opt-cuda-rhel9
  • RHSA-2026:82061 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference Tech Preview 3.5.2 (Gaudi)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-gaudi-rhel9
  • RHSA-2026:82059 Released 2026-10-13 · Red Hat rating Critical
    Red Hat AI Inference 3.5.2 (ROCm)
    • Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-rocm-rhel9
  • RHSA-2026:81171 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:81170 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:81169 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:81168 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:81162 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:81161 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:81128 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (CPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:81127 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:81126 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.0.5 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:81124 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.0.5 (TPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:80860 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:80858 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:80856 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.5.3 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:80795 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.0.5 (spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:80787 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:80781 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:80780 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.0.5 (cuda)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:80776 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:80770 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:80771 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:80768 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:80769 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:80763 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:80761 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (Neuron)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:80760 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (Spyre)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:80759 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.4.4 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:80757 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (ROCm 7.0)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:80755 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.0.5 (rocm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:80756 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (CUDA 13.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:80754 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (ROCm 7.0)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-7.0-rhel9
  • RHSA-2026:80742 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (ROCm 6.4)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:80739 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (CUDA 12.9)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:80740 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (ROCm 6.4)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:80738 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (TPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:80737 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (Spyre)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:80735 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.2.4 (TPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:80732 Released 2026-10-12 · Red Hat rating Important
    Red Hat AI Base Images 3.3.5 (CPU)
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:76042 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CUDA)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:75660 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:75659 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:75658 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:75657 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:75655 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:75654 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:75652 Released 2026-10-05 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74771 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.5.2 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:74688 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:74687 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:74685 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:74683 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:74681 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:74679 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74678 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:74677 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:74674 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.4.3 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:74463 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (ROCm 7.0)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:74462 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (CUDA 12.9)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:74461 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (Spyre)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:74460 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (CPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:74459 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (ROCm 6.4)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:74458 Released 2026-10-01 · Red Hat rating Important
    Red Hat AI Base Images 3.2.3 (TPU)
    • Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:74088 Released 2026-09-30 · Red Hat rating Important
    python3.9 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) python3-3.9.21-2.el9_6.7, python3-debug-3.9.21-2.el9_6.7, python3-idle-3.9.21-2.el9_6.7 +2
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) python-unversioned-command-3.9.21-2.el9_6.7, python3-devel-3.9.21-2.el9_6.7, python3-tkinter-3.9.21-2.el9_6.7
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) python3-3.9.21-2.el9_6.7, python3-libs-3.9.21-2.el9_6.7, python3.9-3.9.21-2.el9_6.7
  • RHSA-2026:74087 Released 2026-09-30 · Red Hat rating Important
    python3.9 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) python-unversioned-command-3.9.18-3.el9_4.14, python3-devel-3.9.18-3.el9_4.14, python3-tkinter-3.9.18-3.el9_4.14
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) python3-3.9.18-3.el9_4.14, python3-libs-3.9.18-3.el9_4.14, python3.9-3.9.18-3.el9_4.14
  • RHSA-2026:73962 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (cuda)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:73961 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:73960 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (cpu)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:73959 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (tpu)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:73930 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (rocm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:73929 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2026:73909 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Base Images 3.0.3 (rocm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:73859 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2026:66018 Released 2026-09-09 · Red Hat rating Important
    Red Hat Update Infrastructure 5.3 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
  • RHSA-2026:64806 Released 2026-09-08 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) platform-python-3.6.8-51.el8_8.17, platform-python-debug-3.6.8-51.el8_8.17, platform-python-devel-3.6.8-51.el8_8.17 +3
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) platform-python-3.6.8-51.el8_8.17, platform-python-debug-3.6.8-51.el8_8.17, platform-python-devel-3.6.8-51.el8_8.17 +3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) platform-python-3.6.8-51.el8_8.17, python3-3.6.8-51.el8_8.17, python3-libs-3.6.8-51.el8_8.17 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) platform-python-3.6.8-51.el8_8.17, python3-3.6.8-51.el8_8.17, python3-libs-3.6.8-51.el8_8.17 +1
  • RHSA-2026:64816 Released 2026-09-08 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) platform-python-3.6.8-47.el8_6.15, platform-python-debug-3.6.8-47.el8_6.15, platform-python-devel-3.6.8-47.el8_6.15 +3
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) platform-python-3.6.8-47.el8_6.15, platform-python-debug-3.6.8-47.el8_6.15, platform-python-devel-3.6.8-47.el8_6.15 +3
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) platform-python-3.6.8-47.el8_6.15, python3-3.6.8-47.el8_6.15, python3-libs-3.6.8-47.el8_6.15 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) platform-python-3.6.8-47.el8_6.15, python3-3.6.8-47.el8_6.15, python3-libs-3.6.8-47.el8_6.15 +1
  • RHSA-2026:63117 Released 2026-09-03 · Red Hat rating Important
    python3.12 security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) python3.12-3.12.9-1.el9_6.10, python3.12-debug-3.12.9-1.el9_6.10, python3.12-idle-3.12.9-1.el9_6.10 +2
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) python3.12-3.12.9-1.el9_6.10, python3.12-devel-3.12.9-1.el9_6.10, python3.12-libs-3.12.9-1.el9_6.10 +1
  • RHSA-2026:63024 Released 2026-09-03 · Red Hat rating Important
    python3.12 security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) python-unversioned-command-3.12.9-2.el10_0.11, python3-devel-3.12.9-2.el10_0.11, python3-tkinter-3.12.9-2.el10_0.11
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) python3-3.12.9-2.el10_0.11, python3-libs-3.12.9-2.el10_0.11, python3.12-3.12.9-2.el10_0.11
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) python3-debug-3.12.9-2.el10_0.11, python3-idle-3.12.9-2.el10_0.11, python3-test-3.12.9-2.el10_0.11
  • RHSA-2026:62809 Released 2026-09-02 · Red Hat rating Important
    python3.12 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) python3.12-3.12.1-4.el9_4.15, python3.12-devel-3.12.1-4.el9_4.15, python3.12-libs-3.12.1-4.el9_4.15 +1
  • RHSA-2026:59009 Released 2026-08-24 · Red Hat rating Important
    python3.12 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.12-3.12.14-1.el9_8, python3.12-devel-3.12.14-1.el9_8, python3.12-libs-3.12.14-1.el9_8 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3.12-3.12.14-1.el9_8, python3.12-debug-3.12.14-1.el9_8, python3.12-idle-3.12.14-1.el9_8 +2
  • RHSA-2026:58971 Released 2026-08-24 · Red Hat rating Important
    python3.12 security update
    • Red Hat Enterprise Linux AppStream (v. 8) python3.12-3.12.14-1.el8_10, python3.12-devel-3.12.14-1.el8_10, python3.12-libs-3.12.14-1.el8_10 +2
    • Red Hat Enterprise Linux CRB (v. 8) python3.12-3.12.14-1.el8_10, python3.12-debug-3.12.14-1.el8_10, python3.12-idle-3.12.14-1.el8_10 +2
  • RHSA-2026:58928 Released 2026-08-24 · Red Hat rating Important
    python3.14 security update
    • Red Hat Enterprise Linux AppStream (v. 10) python3.14-3.14.7-2.el10_2, python3.14-devel-3.14.7-2.el10_2, python3.14-libs-3.14.7-2.el10_2 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) python3.14-debug-3.14.7-2.el10_2, python3.14-freethreading-3.14.7-2.el10_2, python3.14-freethreading-debug-3.14.7-2.el10_2 +7
  • RHSA-2026:58901 Released 2026-08-24 · Red Hat rating Important
    python3.14 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python3.14-3.14.7-2.el9_8, python3.14-devel-3.14.7-2.el9_8, python3.14-libs-3.14.7-2.el9_8 +1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3.14-3.14.7-2.el9_8, python3.14-debug-3.14.7-2.el9_8, python3.14-freethreading-3.14.7-2.el9_8 +9
  • RHSA-2026:58902 Released 2026-08-24 · Red Hat rating Important
    python3.12 security update
    • Red Hat Enterprise Linux AppStream (v. 10) python-unversioned-command-3.12.14-1.el10_2, python3-devel-3.12.14-1.el10_2, python3-tkinter-3.12.14-1.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) python3-3.12.14-1.el10_2, python3-libs-3.12.14-1.el10_2, python3.12-3.12.14-1.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) python3-debug-3.12.14-1.el10_2, python3-idle-3.12.14-1.el10_2, python3-test-3.12.14-1.el10_2
  • RHSA-2026:58981 Released 2026-08-24 · Red Hat rating Critical
    Red Hat Update Infrastructure 5.3 Technology Preview security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
  • RHSA-2026:56219 Released 2026-08-18 · Red Hat rating Important
    python3 security update
    • Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-78.el8_10, platform-python-debug-3.6.8-78.el8_10, platform-python-devel-3.6.8-78.el8_10 +3
    • Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-78.el8_10, python3-3.6.8-78.el8_10, python3-libs-3.6.8-78.el8_10 +1
  • RHSA-2026:54760 Released 2026-08-13 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:54554 Released 2026-08-13 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images python3.13-3.13.15-1.hum1@aarch64, python3.13-3.13.15-1.hum1@src, python3.13-3.13.15-1.hum1@x86_64 +16
  • RHSA-2026:54534 Released 2026-08-13 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images python-unversioned-command-3.14.7-1.hum1@noarch@public-hummingbird-aarch64-rpms, python-unversioned-command-3.14.7-1.hum1@noarch@public-hummingbird-x86_64-rpms, python3-3.14.7-1.hum1@aarch64 +28
  • RHSA-2026:54268 Released 2026-08-12 · Red Hat rating Important
    python3.9 security update
    • Red Hat Enterprise Linux AppStream (v. 9) python-unversioned-command-3.9.25-7.el9_8.3, python3-devel-3.9.25-7.el9_8.3, python3-tkinter-3.9.25-7.el9_8.3
    • Red Hat Enterprise Linux BaseOS (v. 9) python3-3.9.25-7.el9_8.3, python3-libs-3.9.25-7.el9_8.3, python3.9-3.9.25-7.el9_8.3
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) python3-3.9.25-7.el9_8.3, python3-debug-3.9.25-7.el9_8.3, python3-idle-3.9.25-7.el9_8.3 +2
  • RHSA-2026:38091 Released 2026-07-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images python3.14-3.14.6-1.4.hum1@aarch64, python3.14-3.14.6-1.4.hum1@src, python3.14-3.14.6-1.4.hum1@x86_64 +26
  • RHSA-2026:38090 Released 2026-07-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images python3.13-3.13.14-1.4.hum1@aarch64, python3.13-3.13.14-1.4.hum1@src, python3.13-3.13.14-1.4.hum1@x86_64 +16
  • RHSA-2026:38018 Released 2026-07-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images python3.11-3.11.15-5.2.hum1@aarch64, python3.11-3.11.15-5.2.hum1@src, python3.11-3.11.15-5.2.hum1@x86_64 +12
  • RHSA-2026:38017 Released 2026-07-10 · Red Hat rating Important
    Red Hat Hardened Images RPMs Security Update
    • Red Hat Hardened Images python3.12-3.12.13-3.5.hum1@aarch64, python3.12-3.12.13-3.5.hum1@src, python3.12-3.12.13-3.5.hum1@x86_64 +12

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Python Software Foundation CPython 3.10.21, 3.11.16 and 4 more versions

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-10316 tarfile opened in streaming mode mishandles EOFPriority LOW 37
    • TI-2026-00645 Configuration Injection via Carriage Return (\r) in write() methodPriority LOW 18
    Show all 3 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Red Hat AI Inference Server 3.2Fixed RHSA-2026:73859, RHSA-2026:73929, RHSA-2026:73930
Red Hat AI Inference Server 3.5Fixed RHSA-2026:82059, RHSA-2026:82061, RHSA-2026:82066, RHSA-2026:82368, RHSA-2026:82371, RHSA-2026:82415
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:63117, RHSA-2026:74088
Red Hat Discovery 2Fixed RHSA-2026:54760
Red Hat Enterprise Linux AI 3.5Fixed RHSA-2026:92449, RHSA-2026:92452
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:58902, RHSA-2026:58928
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:56219, RHSA-2026:58971
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:54268, RHSA-2026:58901, RHSA-2026:59009
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:64816
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:64806
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:62809, RHSA-2026:74087
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:63024
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:63117, RHSA-2026:74088
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:64816
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:64806
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:58902
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:56219
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:54268
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:64816
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:64806
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:74087
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:63024
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:74088
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:64816
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:64806
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:58971
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:58902, RHSA-2026:58928
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:54268, RHSA-2026:58901, RHSA-2026:59009
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:63024
Red Hat Hardened ImagesFixed RHSA-2026:38017, RHSA-2026:38018, RHSA-2026:38090, RHSA-2026:38091, RHSA-2026:54534, RHSA-2026:54554
Red Hat OpenShift AI 3.0Fixed RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962, RHSA-2026:80755, RHSA-2026:80780, RHSA-2026:80795, RHSA-2026:81124, RHSA-2026:81126
Red Hat OpenShift AI 3.2Fixed RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463, RHSA-2026:80735, RHSA-2026:80739, RHSA-2026:80740, RHSA-2026:80757, RHSA-2026:80760, RHSA-2026:81128
Red Hat OpenShift AI 3.3Fixed RHSA-2026:80732, RHSA-2026:80737, RHSA-2026:80738, RHSA-2026:80742, RHSA-2026:80754, RHSA-2026:80756, RHSA-2026:80761, RHSA-2026:81127
Red Hat OpenShift AI 3.4Fixed RHSA-2026:74674, RHSA-2026:74677, RHSA-2026:74678, RHSA-2026:74679, RHSA-2026:74681, RHSA-2026:74683, RHSA-2026:74685, RHSA-2026:74687, RHSA-2026:74688, RHSA-2026:80759, RHSA-2026:80763, RHSA-2026:80768, RHSA-2026:80769, RHSA-2026:80770, RHSA-2026:80771, RHSA-2026:80776, RHSA-2026:80781, RHSA-2026:80787
Red Hat OpenShift AI 3.5Fixed RHSA-2026:74771, RHSA-2026:75652, RHSA-2026:75654, RHSA-2026:75655, RHSA-2026:75657, RHSA-2026:75658, RHSA-2026:75659, RHSA-2026:75660, RHSA-2026:76042, RHSA-2026:80856, RHSA-2026:80858, RHSA-2026:80860, RHSA-2026:81161, RHSA-2026:81162, RHSA-2026:81168, RHSA-2026:81169, RHSA-2026:81170, RHSA-2026:81171
Red Hat Update Infrastructure 5Fixed RHSA-2026:58981, RHSA-2026:66018
Not affected: 6 products
  • Red Hat Discovery 2
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux AI (RHEL AI)
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-11940
  2. 2026-10-03 Alias added: GHSA-9mc4-rqmq-h467
  3. 2026-10-05 Fix available: RHSA-2026:75659 · Red Hat
  4. 2026-10-05 Fix available: RHSA-2026:75660 · Red Hat
  5. 2026-10-05 Fix available: RHSA-2026:75655 · Red Hat
  6. 2026-10-05 Fix available: RHSA-2026:75657 · Red Hat
  7. 2026-10-05 Fix available: RHSA-2026:75654 · Red Hat
  8. 2026-10-05 Fix available: RHSA-2026:75652 · Red Hat
  9. 2026-10-05 Fix available: RHSA-2026:75658 · Red Hat
  10. 2026-10-05 Affected versions changed · Red Hat
  11. 2026-10-06 Fix available: RHSA-2026:76042 · Red Hat
  12. 2026-10-06 Affected versions changed · Red Hat
  13. 2026-10-13 Fix available: RHSA-2026:82066 · Red Hat
  14. 2026-10-13 Fix available: RHSA-2026:80735 · Red Hat
  15. 2026-10-13 Fix available: RHSA-2026:80732 · Red Hat
  16. 2026-10-13 Fix available: RHSA-2026:80739 · Red Hat
  17. 2026-10-13 Fix available: RHSA-2026:80737 · Red Hat
  18. 2026-10-13 Fix available: RHSA-2026:80742 · Red Hat
  19. 2026-10-13 Fix available: RHSA-2026:80755 · Red Hat
  20. 2026-10-13 Fix available: RHSA-2026:80754 · Red Hat
  21. 2026-10-13 Fix available: RHSA-2026:80740 · Red Hat
  22. 2026-10-13 Fix available: RHSA-2026:80738 · Red Hat
  23. 2026-10-13 Fix available: RHSA-2026:80757 · Red Hat
  24. 2026-10-13 Fix available: RHSA-2026:80756 · Red Hat
  25. 2026-10-13 Fix available: RHSA-2026:80763 · Red Hat
  26. 2026-10-13 Fix available: RHSA-2026:80761 · Red Hat
  27. 2026-10-13 Fix available: RHSA-2026:80768 · Red Hat
  28. 2026-10-13 Fix available: RHSA-2026:80769 · Red Hat
  29. 2026-10-13 Fix available: RHSA-2026:80771 · Red Hat
  30. 2026-10-13 Fix available: RHSA-2026:80770 · Red Hat
  31. 2026-10-13 Fix available: RHSA-2026:80781 · Red Hat
  32. 2026-10-13 Fix available: RHSA-2026:80780 · Red Hat
  33. 2026-10-13 Fix available: RHSA-2026:80759 · Red Hat
  34. 2026-10-13 Fix available: RHSA-2026:80760 · Red Hat
  35. 2026-10-13 Fix available: RHSA-2026:80787 · Red Hat
  36. 2026-10-13 Fix available: RHSA-2026:80776 · Red Hat
  37. 2026-10-13 Fix available: RHSA-2026:80795 · Red Hat
  38. 2026-10-13 Fix available: RHSA-2026:80856 · Red Hat
  39. 2026-10-13 Fix available: RHSA-2026:80860 · Red Hat
  40. 2026-10-13 Fix available: RHSA-2026:80858 · Red Hat
  41. 2026-10-13 Fix available: RHSA-2026:81127 · Red Hat
  42. 2026-10-13 Fix available: RHSA-2026:81124 · Red Hat
  43. 2026-10-13 Fix available: RHSA-2026:81126 · Red Hat
  44. 2026-10-13 Fix available: RHSA-2026:81128 · Red Hat
  45. 2026-10-13 Fix available: RHSA-2026:81161 · Red Hat
  46. 2026-10-13 Fix available: RHSA-2026:81162 · Red Hat
  47. 2026-10-13 Fix available: RHSA-2026:81169 · Red Hat
  48. 2026-10-13 Fix available: RHSA-2026:81168 · Red Hat
  49. 2026-10-13 Fix available: RHSA-2026:81171 · Red Hat
  50. 2026-10-13 Fix available: RHSA-2026:81170 · Red Hat
  51. 2026-10-13 Fix available: RHSA-2026:82061 · Red Hat
  52. 2026-10-13 Fix available: RHSA-2026:82059 · Red Hat
  53. 2026-10-13 Fix available: Red Hat AI Inference Server 3.5, Red Hat OpenShift AI 3.3 · Red Hat
  54. 2026-10-14 Fix available: RHSA-2026:82368 · Red Hat
  55. 2026-10-14 Fix available: RHSA-2026:82415 · Red Hat
  56. 2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
  57. 2026-10-15 Affected versions changed · Red Hat
  58. 2026-10-30 Fix available: RHSA-2026:92452 · Red Hat
  59. 2026-10-30 Fix available: RHSA-2026:92449 · Red Hat
  60. 2026-10-30 Fix available: Red Hat Enterprise Linux AI 3.5 · Red Hat

References

Patch 8

Advisory 1

Other 1

  • TI-2024-07037 Quadratic complexity parsing cookies with backslashes CVSS 3.1HIGH 7.5
  • TI-2024-11791 Bypass extraction filter to modify file metadata outside extraction directory CVSS 3.1MEDIUM 5.3
  • TI-2024-00411 Quoted zip-bomb protection for zipfile CVSS 3.1MEDIUM 6.2
  • TI-2026-13296 `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching CVSS 4.0MEDIUM 6.0
  • TI-2024-06422 Email header injection due to unquoted newlines CVSS 3.1MEDIUM 5.5
  • TI-2026-04606 Possible to hijack modules in current working directory CVSS 4.0MEDIUM 5.6
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences