CVE-2026-25645

mediumPriorität · verfolgen · 32EPSS 0.002 · 8. PerzentilExploit · PoCDEEUFRRUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

0.19% (8th) EPSS

CVSS 5.5 · medium

Is it mine?

39 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · bewertet 2026-10-27

Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenpython311-requests-0:2.33.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-requests-0:2.33.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-requests-0:2.33.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython311-requests-0:2.33.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython313-requests-0:2.33.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython313-requests-0:2.33.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython313-requests-0:2.33.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobenpython313-requests-0:2.33.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 3.6

v3.15.5mediumAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.14.4mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:Nsecondary · ENISA EU

v3.14.4mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:Nsecondary · security-advisories@github.comAusnutzbarkeit 0.8 · Auswirkung 3.6

v3.14.4mediumCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:Nsecondary · OSV

v3.15.2mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Psecondary · CVSS-BT (t0sche)

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nsecondary · SUSE Product Security

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-377USCWE-377USCWE-377US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

Jaycelation/CVE-2026-25645Insecure Temp File Reuse in extract_zipped_paths()PoC · poc_in_github

betroffene Produkte (39)

Betroffene Produkte und Versionsbereiche.

psf Requests≤ < 2.33.0enisa_euvdEU
Fedora Project Fedora≤ 43fstec_bduRU
Fedora Project Fedora≤ 44fstec_bduRU
Python Software Foundation requests≤ 2.33.0fstec_bduRU
Red Hat, Inc. Ansible Automation Platform≤ 2fstec_bduRU
Red Hat, Inc. Ansible Automation Platform≤ Ansible Core 2fstec_bduRU
Red Hat, Inc. External Secrets Operator for Red Hat OpenShiftalle Versionenfstec_bduRU
Red Hat, Inc. Lightspeed Corealle Versionenfstec_bduRU
Red Hat, Inc. Logging subsystem for Red Hat OpenShiftalle Versionenfstec_bduRU
Red Hat, Inc. Migration Toolkit for Containersalle Versionenfstec_bduRU
Red Hat, Inc. Migration Toolkit for Virtualizationalle Versionenfstec_bduRU
Red Hat, Inc. OpenShift Container Platform≤ 4fstec_bduRU
Red Hat, Inc. Openshift Service Mesh≤ 3fstec_bduRU
Red Hat, Inc. Pen Drive Powered by Red Hat Lightspeedalle Versionenfstec_bduRU
Red Hat, Inc. Red Hat AI Inference Serveralle Versionenfstec_bduRU
Red Hat, Inc. Red Hat Developer Huballe Versionenfstec_bduRU
Red Hat, Inc. Red Hat Discovery≤ 2fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU

20 von 39 angezeigt

Advisories (4)

Hersteller- und Ökosystem-Meldungen dazu.

openSUSE-SU-2026:10455-1python311-requests-2.33.0-1.1 on GA media2026-03-28csaf · suse_csafDE
python311-requests-2.33.0-1.1 on GA media
GHSA-gc5v-m9x4-r6x2Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function2026-03-25ghsa · osvUS
### Impact The `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. ### Affected usages **Standard usage of the Requests library is not affected by this vulnerability.** Only applications that call `extract_zipped_paths()` directly are impacted. ### Remediation Upgrade to at least Requests 2.33.0, where the library now extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
PYSEC-2026-22752026-03-25vendor · osvUS
Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.

auch bekannt als (7)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv suse_csaf certfr NVD CVE.org MITRE

veröffentlicht 2026-03-25geändert 2026-06-17

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan