Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function
Priority LOW 24CWE-377Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Partial Red Hat: 3 fixed, 25 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat.
Summary
Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00189 8th percentileScored 2026-11-07
Fix Partial requests (psf): 2.33.0requests (PyPI): 2.33.0Red Hat: 4 advisoriesRed Hat: 3 fixed, 25 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| python-pillow | requests | before 2.33.0 | 2.33.0 | Patch available | CNA |
| — | requests (PyPI) | before 2.33.0 | 2.33.0 | Patch available | GHSA-gc5v-m9x4-r6x2 |
- requests Vendorpython-pillow Affected before 2.33.0 Fixed in 2.33.0 Patch available CNA
- requests (PyPI) Vendor— Affected before 2.33.0 Fixed in 2.33.0 Patch available GHSA-gc5v-m9x4-r6x2
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:python:requests:*:*:*:*:*:*:*:* | before 2.33.0 | Vulnerable | python-pillow |
- cpe:2.3:a:python:requests:*:*:*:*:*:*:*:* Versions before 2.33.0 Vulnerable ·python-pillow
Remediation
- Fix · CNA requests (psf) Fixed in 2.33.0
- Fix · GHSA-gc5v-m9x4-r6x2 requests (PyPI) Fixed in 2.33.0 Advisory →
Red Hat 4 advisories
- RHSA-2026:59151 Released 2026-08-24 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.4.4 enhancement update
- Red Hat Enterprise Linux AI 3.4 registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9, registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9 +3
- RHSA-2026:59144 Released 2026-08-24 · Red Hat rating ImportantRed Hat Enterprise Linux AI 3.4.4 enhancement update
- Red Hat Enterprise Linux AI 3.4 registry.redhat.io/rhelai3/disk-image-cuda-rhel9
- RHSA-2026:57383 Released 2026-08-20 · Red Hat rating ModerateRed Hat AI Inference Model Optimization Tools 3.4.4 (cuda)
- Red Hat AI Inference Server 3.4 registry.redhat.io/rhaii/model-opt-cuda-rhel9
Show 1 more Red Hat advisories
- RHSA-2026:56431 Released 2026-08-18 · Red Hat rating ImportantRed Hat OpenShift Data Foundation 4.18.27 security, enhancement & bug fix update
- Red Hat Openshift Data Foundation 4.18 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +16
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| External Secrets Operator for Red Hat OpenShift | Affected | No fix yet: Fix deferred |
| Lightspeed Core | Affected | No fix yet: Fix deferred |
| Logging Subsystem for Red Hat OpenShift | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Containers | Affected | No fix yet: Fix deferred |
| Migration Toolkit for Virtualization | Affected | No fix yet: Fix deferred |
| OpenShift Lightspeed | Affected | No fix yet: Fix deferred |
| OpenShift Service Mesh 3 | Affected | No fix yet: Fix deferred |
| Pen Drive Powered by Red Hat Lightspeed | Affected | No fix yet: Fix deferred |
| Red Hat AI Inference Server | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform 2 | Affected | No fix yet: Fix deferred |
| Red Hat Ansible Automation Platform Ansible Core 2 | Affected | No fix yet: Fix deferred |
| Red Hat Developer Hub 1 | Affected | No fix yet: Fix deferred |
| Red Hat Discovery 2 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 10 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 7 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 9 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift AI (RHOAI) | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat Quay 3 | Affected | No fix yet: Fix deferred |
| Red Hat Satellite 6 | Affected | No fix yet: Fix deferred |
| Red Hat Trusted Artifact Signer | Affected | No fix yet: Fix deferred |
| Red Hat build of Quarkus Native builder | Affected | No fix yet: Fix deferred |
| Service Telemetry Framework 1.5 | Affected | No fix yet: Fix deferred |
| Red Hat AI Inference Server 3.4 | Fixed | RHSA-2026:57383 |
| Red Hat Enterprise Linux AI 3.4 | Fixed | RHSA-2026:59144, RHSA-2026:59151 |
| Red Hat Openshift Data Foundation 4.18 | Fixed | RHSA-2026:56431 |
Not affected: 2 products
- Red Hat Enterprise Linux AI 3.4
- Red Hat Openshift Data Foundation 4.18
Timeline
- 2026-10-02 Threatist record created from CVE-2026-25645
- 2026-10-03 Alias added: GHSA-gc5v-m9x4-r6x2
- 2026-10-27 Affected versions changed · Red Hat
References
Advisory 2
More python-pillow Requests vulnerabilities
- TI-2018-12846 The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an… CVSS 3.1HIGH 7.5
- TI-2015-02029 The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows… CVSS 2.0MEDIUM 6.8
- TI-2023-15957 Unintended leak of Proxy-Authorization header in requests CVSS 3.1MEDIUM 6.1
- TI-2014-01432 Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive… CVSS 2.0MEDIUM 5.0
- TI-2014-01431 Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2026-25645 · CVE Program
- CVE-2026-25645 · NVD
- FIRST EPSS
- GHSA-gc5v-m9x4-r6x2 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-25645 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences