Python-Multipart has Arbitrary File Write via Non-Default Configuration
Priority MEDIUM 42CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · High · Low
- Fix status
- Partial Red Hat: 6 fixed, 7 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat.
Summary
Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuration options `UPLOAD_DIR` and `UPLOAD_KEEP_FILENAME=True`. An attacker can write uploaded files to arbitrary locations on the filesystem by crafting a malicious filename. Users should upgrade to version 0.0.22 to receive a patch or, as a workaround, avoid using `UPLOAD_KEEP_FILENAME=True` in project configurations.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02206 82nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial python-multipart (Kludex): 0.0.22python-multipart (PyPI): 0.0.22Red Hat: 11 advisoriesRed Hat: 6 fixed, 7 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Kludex | python-multipart | before 0.0.22 | 0.0.22 | Patch available | CNA |
| — | python-multipart (PyPI) | before 0.0.22 | 0.0.22 | Patch available | GHSA-wp53-j4wj-2cfg |
- python-multipart VendorKludex Affected before 0.0.22 Fixed in 0.0.22 Patch available CNA
- python-multipart (PyPI) Vendor— Affected before 0.0.22 Fixed in 0.0.22 Patch available GHSA-wp53-j4wj-2cfg
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fastapiexpert:python-multipart:*:*:*:*:*:python:*:* | before 0.0.22 | Vulnerable | Fastapiexpert |
- cpe:2.3:a:fastapiexpert:python-multipart:*:*:*:*:*:python:*:* Versions before 0.0.22 Vulnerable ·Fastapiexpert
Remediation
- Fix · CNA python-multipart (Kludex) Fixed in 0.0.22
- Fix · GHSA-wp53-j4wj-2cfg python-multipart (PyPI) Fixed in 0.0.22 Advisory →
Red Hat 11 advisories
- RHSA-2026:51357 Released 2026-08-06 · Red Hat rating Importantsatellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview
- Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-engine-rhel9
- RHSA-2026:44696 Released 2026-07-23 · Red Hat rating Importantsatellite/iop-advisor-engine-rhel9 container image available as a Technology Preview
- Red Hat Satellite 6.17 registry.redhat.io/satellite/iop-advisor-engine-rhel9
- RHSA-2026:42644 Released 2026-07-21 · Red Hat rating ImportantRHOAI 2.25.9 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
Show 8 more Red Hat advisories
- RHSA-2026:19712 Released 2026-05-20 · Red Hat rating CriticalRHOAI 3.3.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +33
- RHSA-2026:10184 Released 2026-04-23 · Red Hat rating ImportantRHOAI 2.25.5 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
- RHSA-2026:3960 Released 2026-03-06 · Red Hat rating ImportantRed Hat Ansible Automation Platform 2.6 Container Release Update
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-minimal-rhel9 +9
- RHSA-2026:3782 Released 2026-03-04 · Red Hat rating CriticalRHOAI 2.25.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +27
- RHSA-2026:3713 Released 2026-03-04 · Red Hat rating CriticalRHOAI 3.3 - Red Hat OpenShift AI
- Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
- RHSA-2026:3462 Released 2026-02-27 · Red Hat rating CriticalRed Hat AI Inference Server 3.2.2 (ROCm)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
- RHSA-2026:3461 Released 2026-02-27 · Red Hat rating CriticalRed Hat AI Inference Server 3.2.2 (CUDA)
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
- RHSA-2026:1504 Released 2026-01-28 · Red Hat rating Importantsatellite/foreman-mcp-server-rhel9 container image available as a Technology Preview
- Red Hat Satellite 6.18 registry.redhat.io/satellite/foreman-mcp-server-rhel9
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Lightspeed Core | Affected | No fix yet |
| OpenShift Lightspeed | Affected | No fix yet |
| Red Hat AI Inference Server | Affected | No fix yet |
| Red Hat Ansible Automation Platform 2 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix planned: Will not fix |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet |
| Red Hat Satellite 6 | Affected | No fix yet |
| Red Hat AI Inference Server 3.2 | Fixed | RHSA-2026:3461, RHSA-2026:3462 |
| Red Hat Ansible Automation Platform 2.6 | Fixed | RHSA-2026:3960 |
| Red Hat OpenShift AI 2.25 | Fixed | RHSA-2026:10184, RHSA-2026:3782, RHSA-2026:42644 |
| Red Hat OpenShift AI 3.3 | Fixed | RHSA-2026:19712, RHSA-2026:3713 |
| Red Hat Satellite 6.17 | Fixed | RHSA-2026:44696 |
| Red Hat Satellite 6.18 | Fixed | RHSA-2026:1504, RHSA-2026:51357 |
Not affected: 6 products
- OpenShift Lightspeed
- Red Hat Ansible Automation Platform 2
- Red Hat Ansible Automation Platform 2.6
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift AI 2.25
- Red Hat OpenShift AI 3.3
Timeline
- 2026-10-02 Threatist record created from CVE-2026-24486
- 2026-10-03 Alias added: GHSA-wp53-j4wj-2cfg
- 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat
References
More Kludex vulnerabilities
- TI-2025-38917 Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse CVSS 3.1HIGH 7.5
- TI-2026-30841 Python-Multipart: Denial of Service via unbounded multipart part headers CVSS 3.1HIGH 7.5
- TI-2024-36140 python-multipart has a Denial of service (DoS) via deformation `multipart/form-data` boundary CVSS 3.1HIGH 7.5
Sources
- CVE-2026-24486 · CVE Program
- CVE-2026-24486 · NVD
- FIRST EPSS
- GHSA-wp53-j4wj-2cfg · GitHub Advisory Database · CC BY 4.0
- CVE-2026-24486 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences