Critical Security Update for Tesseract: CVE-2026-73066
Summary
RHSA-2026:72280: Red Hat Security Advisory: tesseract security update. Affects tesseract versions < 0:4.1.1-7.el9_2.1. Fixed in 0:4.1.1-7.el9_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Tesseract is an open-source Optical Character Recognition (OCR) engine that enables the conversion of images containing text into machine-encoded text. It is widely used in various applications for text recognition and processing. The package is known for its high accuracy and support for multiple languages, making it a popular choice among developers. However, recent vulnerabilities have raised concerns regarding its security, necessitating prompt updates to mitigate risks.
Vulnerability Detail
The vulnerability identified as CVE-2026-73066 affects Tesseract and its associated packages. This issue arises from insufficient validation of input data, which could allow an attacker to exploit the system, potentially leading to unauthorized access or data manipulation. The ramifications of this vulnerability are significant, as they could compromise the integrity and confidentiality of the data processed by Tesseract. The CVSS score for this vulnerability is 7.1, indicating a high severity level.
How To Fix
Minimum fixed version
0:4.1.1-7.el9_2.1
This is the first release that contains the fix.
sudo dnf update tesseractTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the Tesseract service or implementing additional input validation measures to mitigate potential exploitation until the update can be applied.
Conclusion
In summary, the vulnerability CVE-2026-73066 poses a significant risk to Tesseract and its associated packages. It is crucial to update to the patched version to ensure the security and integrity of your applications. Utilizing tools like Vulert can help monitor and alert for open-source vulnerabilities in real-time.
See every vulnerability recorded for tesseract →
FAQ
CVE-2026-73066 is a security vulnerability in Tesseract that allows for potential unauthorized access due to insufficient input validation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for CVE-2026-73066 is 7.1, indicating a high severity level.
If you cannot update immediately, consider implementing additional input validation measures or restricting access to the Tesseract service as a temporary workaround.
More information about Tesseract can be found on its official GitHub repository and documentation pages.
Related vulnerabilities
Recent vulnerabilities recorded for tesseract.
