Read the docs
TI-2026-45177 Aliases CVE-2026-63374GHSA-82r6-8w77-94w6

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

Priority MEDIUM 48CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Spoofing
Confidentiality · integrity · availability
High · High · None
Fix status
Partial Red Hat: 9 fixed, 13 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-295.

Summary

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connect_tcp() and TLSStream.wrap() can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a connection to a non-ASCII domain is hijacked or redirected, an attacker can obtain a legitimate certificate for the different ASCII hostname produced by IDNA 2003 and present it to the client, causing the malicious endpoint's certificate to validate. This issue is fixed in version 4.14.2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00289 21st percentileScored 2026-11-07
Fix Partial anyio (agronholm): 4.14.2anyio (PyPI): 4.14.2Red Hat: 16 advisoriesRed Hat: 9 fixed, 13 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
agronholmanyiobefore 4.14.24.14.2Patch availableCNA
—anyio (PyPI)before 4.14.24.14.2Patch availableGHSA-82r6-8w77-94w6
  • anyio Vendoragronholm Affected before 4.14.2 Fixed in 4.14.2 Patch available CNA
  • anyio (PyPI) Vendor— Affected before 4.14.2 Fixed in 4.14.2 Patch available GHSA-82r6-8w77-94w6

Remediation

  • Fix · CNA anyio (agronholm) Fixed in 4.14.2
  • Fix · GHSA-82r6-8w77-94w6 anyio (PyPI) Fixed in 4.14.2 Advisory →

Red Hat 16 advisories

  • RHSA-2026:95267 Released 2026-11-04 · Red Hat rating Critical
    RHTAS 1.5.1 - Tech Preview Release Of the Sigstore A2A 0.0.2
    • Red Hat Trusted Artifact Signer 1.5 registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9
  • RHSA-2026:92667 Released 2026-10-29 · Red Hat rating Critical
    satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/foreman-mcp-server-rhel9
  • RHSA-2026:92666 Released 2026-10-29 · Red Hat rating Critical
    satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/foreman-mcp-server-rhel9
Show 13 more Red Hat advisories
  • RHSA-2026:92588 Released 2026-10-29 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:92583 Released 2026-10-29 · Red Hat rating Critical
    General availability of the satellite/iop-host-inventory-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-host-inventory-rhel9
  • RHSA-2026:92574 Released 2026-10-29 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:92566 Released 2026-10-29 · Red Hat rating Critical
    General availability of the satellite/iop-host-inventory-rhel9 container image
    • Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-host-inventory-rhel9
  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:87124 Released 2026-10-21 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/de-supported-rhel9, registry.redhat.io/ansible-automation-platform-27/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9 +8
  • RHSA-2026:87120 Released 2026-10-21 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9, registry.redhat.io/ansible-automation-platform-26/gateway-rhel9 +8
  • RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 3.5.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:79378 Released 2026-10-08 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/controller-rhel9, registry.redhat.io/ansible-automation-platform-27/ee-supported-rhel9, registry.redhat.io/ansible-automation-platform-27/gateway-rhel9 +4
  • RHSA-2026:73930 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (rocm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:73929 Released 2026-09-30 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (cuda)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Confidential Compute AttestationAffectedNo fix yet
Exploit IntelligenceAffectedNo fix yet
Lightspeed CoreAffectedNo fix yet
Migration Toolkit for Applications 8AffectedNo fix yet
Migration Toolkit for ContainersAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
Red Hat AI Inference ServerAffectedNo fix planned: Will not fix
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Enterprise Linux AI (RHEL AI) 3AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Satellite 6AffectedNo fix yet
Red Hat AI Inference Server 3.2Fixed RHSA-2026:73929, RHSA-2026:73930
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:87120
Red Hat Ansible Automation Platform 2.7Fixed RHSA-2026:79378, RHSA-2026:87124
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.4Fixed RHSA-2026:84734, RHSA-2026:92510
Red Hat OpenShift AI 3.5Fixed RHSA-2026:86891
Red Hat Satellite 6.18Fixed RHSA-2026:92583, RHSA-2026:92588, RHSA-2026:92667
Red Hat Satellite 6.19Fixed RHSA-2026:92566, RHSA-2026:92574, RHSA-2026:92666
Red Hat Trusted Artifact Signer 1.5Fixed RHSA-2026:95267
Not affected: 15 products
  • Ansible Automation Orchestrator 2026
  • Lightspeed Services for Advanced Cluster Management
  • Red Hat AI Inference Server
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.7
  • Red Hat Enterprise Linux command line assistant
  • Red Hat Hardened Images
  • Red Hat Lightspeed Services for OCP
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift AI 3.5
  • Red Hat OpenStack Platform 18.0
  • Red Hat Satellite 6

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-63374
  2. 2026-10-03 Alias added: GHSA-82r6-8w77-94w6
  3. 2026-10-06 Affected versions changed · Red Hat
  4. 2026-10-09 Fix available: RHSA-2026:79378 · Red Hat
  5. 2026-10-09 Fix available: Red Hat Ansible Automation Platform 2.7 · Red Hat
  6. 2026-10-15 Affected versions changed · Red Hat
  7. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  8. 2026-10-20 Fix available: Red Hat OpenShift AI 3.4 · Red Hat
  9. 2026-10-21 Affected versions changed · Red Hat
  10. 2026-10-22 Fix available: RHSA-2026:87124 · Red Hat
  11. 2026-10-22 Fix available: RHSA-2026:87120 · Red Hat
  12. 2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
  13. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  14. 2026-10-23 Fix available: Red Hat Ansible Automation Platform 2.6, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.5 · Red Hat
  15. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  16. 2026-10-30 Affected versions changed · Red Hat
  17. 2026-10-31 Fix available: RHSA-2026:92583 · Red Hat
  18. 2026-10-31 Fix available: RHSA-2026:92574 · Red Hat
  19. 2026-10-31 Fix available: RHSA-2026:92666 · Red Hat
  20. 2026-10-31 Fix available: RHSA-2026:92667 · Red Hat
  21. 2026-10-31 Fix available: Red Hat Satellite 6.18, Red Hat Satellite 6.19 · Red Hat
  22. 2026-11-01 Fix available: RHSA-2026:92566 · Red Hat
  23. 2026-11-01 Fix available: RHSA-2026:92588 · Red Hat
  24. 2026-11-06 Fix available: RHSA-2026:95267 · Red Hat
  25. 2026-11-06 Fix available: Red Hat Trusted Artifact Signer 1.5 · Red Hat

References

Other 5

  • TI-2026-21200 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads CVSS 3.0HIGH 7.5
  • TI-2024-17225 CBOR2 decoder has potential buffer overflow CVSS 3.1HIGH 7.5
  • TI-2025-39535 Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the… CVSS 3.1HIGH 7.5
  • TI-2025-41712 CBORDecoder reuse can leak shareable values across decode calls CVSS 4.0MEDIUM 5.5
  • TI-2026-45170 AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups CVSS 4.0HIGH 7.0
  • TI-2026-46365 AnyIO process-pool workers can block indefinitely on undrained stderr CVSS 4.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences