CVE-2026-6357
pythonVulnerabilityCVSS 5.3Patched
No public exploitation has been reported so far. A fixed version is available (see the table below).
Recommended action: Update to the fixed version listed for your distribution using the native package manager.
Severity metrics
CVSS 4.0 : 5.3 MEDIUM
Attack vectorLocal
Attack complexityLow
Attack requirementsPresent
Privileges requiredHigh
User interactionActive
Confidentiality impactHigh
Integrity impactHigh
Availability impactNone
Subsequent confidentialityNone
Subsequent integrityNone
Subsequent availabilityNone
Vector: AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Affected & fixed versions by distribution
Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.
| Distribution | Package | Affected | Fixed version | Status |
|---|---|---|---|---|
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | python | - | 2.7.18-150000.120.1 | fixed |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | python | - | 2.7.18-33.79.1 | fixed |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | python | - | 2.7.18-33.79.1 | fixed |