Critical Security Update for Python 3.12 Packages: CVE-2026-15308
Summary
RHSA-2026:47939: Red Hat Security Advisory: python3.12 security update. Affects python-unversioned-command versions < 0:3.12.9-2.el10_0.10. Fixed in 0:3.12.9-2.el10_0.10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python 3.12 is a widely used programming language that supports various programming paradigms, including procedural, object-oriented, and functional programming. It is known for its simplicity and readability, making it a popular choice among developers. The affected packages, including python3, python3-devel, and python3-libs, are essential for Python development and runtime environments. This vulnerability poses a significant risk to applications relying on these packages, potentially leading to security breaches and data loss.
Vulnerability Detail
The vulnerability identified as CVE-2026-15308 affects Python 3.12 and its associated packages. It originates from a flaw in the handling of certain inputs, which could allow an attacker to execute arbitrary code or cause a denial of service. The ramifications of this vulnerability are severe, as it can compromise the integrity and availability of applications using the affected Python packages. The CVSS score of this vulnerability is 7.5, indicating a high severity level that requires immediate attention.
How To Fix
Minimum fixed version
0:3.12.9-2.el10_0.10
This is the first release that contains the fix.
sudo dnf update python-unversioned-commandTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider isolating the affected applications from untrusted inputs and limiting their execution environment to mitigate potential risks. Additionally, monitor the application closely for any unusual behavior.
Conclusion
The vulnerability CVE-2026-15308 poses a significant risk to applications using Python 3.12 and its associated packages. It is crucial to update to the patched version 0:3.12.9-2.el10_0.10 to mitigate potential security threats. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for python-unversioned-command →
FAQ
CVE-2026-15308 is a security vulnerability affecting Python 3.12 and its associated packages, allowing potential arbitrary code execution or denial of service.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 7.5, indicating a high severity level that necessitates prompt action.
If immediate updates are not possible, consider isolating affected applications and monitoring them closely for unusual behavior.
More information can be found in the Red Hat Security Advisory at https://security.access.redhat.com/data/osv/RHSA-2026:47939.json.
Related vulnerabilities
Recent vulnerabilities recorded for python-unversioned-command.
