TI-2026-25203 Aliases CVE-2026-32711 GHSA-v856-2rf8-9f28

pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root

HIGH 69CWE-22Published 2026-03-20 · Updated 2026-03-20

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations. This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue has been fixed in version 3.0.2.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00296 22nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed pydicom (pydicom): 3.0.2pydicom (PyPI): 3.0.2, 2.4.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
pydicom	pydicom	2.0.0-rc.1 to before 3.0.2	3.0.2	Patch available	CNA
—	pydicom (PyPI)	3.0.0 to before 3.0.2	3.0.2	Patch available	GHSA-v856-2rf8-9f28
—	pydicom (PyPI)	before 2.4.5	2.4.5	Patch available	GHSA-v856-2rf8-9f28

pydicom Vendorpydicom Affected 2.0.0-rc.1 to before 3.0.2 Fixed in 3.0.2 Patch available CNA
pydicom (PyPI) Vendor— Affected 3.0.0 to before 3.0.2 Fixed in 3.0.2 Patch available GHSA-v856-2rf8-9f28
pydicom (PyPI) Vendor— Affected before 2.4.5 Fixed in 2.4.5 Patch available GHSA-v856-2rf8-9f28

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:pydicom:pydicom::::::python::*	2.0.0 to before 3.0.2	Vulnerable	pydicom

cpe:2.3:a:pydicom:pydicom:*:*:*:*:*:python:*:* Versions 2.0.0 to before 3.0.2 Vulnerable ·pydicom

Remediation

Fix · CNA pydicom (pydicom) Fixed in 3.0.2
Fix · GHSA-v856-2rf8-9f28 pydicom (PyPI) Fixed in 3.0.2 Advisory →
Fix · GHSA-v856-2rf8-9f28 pydicom (PyPI) Fixed in 2.4.5 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-32711
2026-10-03 Alias added: GHSA-v856-2rf8-9f28

References

Other 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences