PT-2026-25789 · Python+3 · Http.Cookies+3

Seth Larson + 3 · CVE-2026-3644 · Publicado 2026-01-01 · Atualizado 2026-07-08

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:P/I:C/A:N

Name of the Vulnerable Software and Affected Versions http.cookies (affected versions not specified)

Description An incomplete fix for a previous issue related to control character validation in http.cookies.Morsel allows control characters to bypass input validation. The fix did not fully address the problem, leaving the Morsel.update(), |= operator, and unpickling paths vulnerable. Additionally, the BaseCookie.js output() function lacks the output validation present in BaseCookie.output().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Improper Encoding or Escaping of Output

RCE

Enumeração de Fraquezas

CWE-116

CWE-20

Identificadores relacionados

ALSA-2026:10950

ALSA-2026:19019

ALSA-2026:19064

ALSA-2026:19176

ALSA-2026:19177

BDU:2026-04601

BIT-LIBPYTHON-2026-3644

BIT-PYTHON-2026-3644

BIT-PYTHON-MIN-2026-3644

CVE-2026-3644

ECHO-6A47-D40A-2C76

OESA-2026-1899

OESA-2026-1900

OESA-2026-1901

OESA-2026-1902

OPENSUSE-SU-2026:10469-1

OPENSUSE-SU-2026:10477-1

OPENSUSE-SU-2026:10478-1

OPENSUSE-SU-2026:10479-1

OPENSUSE-SU-2026:10480-1

OPENSUSE-SU-2026:10481-1

OPENSUSE-SU-2026:20517-1

PSF-2026-11

RHSA-2026:10950

RHSA-2026:19064

RHSA-2026:19177

RHSA-2026:7443

RHSA-2026:7661

RHSA-2026:8822

RHSA-2026:8824

SUSE-SU-2026:1206-1

SUSE-SU-2026:1292-1

SUSE-SU-2026:1296-1

SUSE-SU-2026:1345-1

SUSE-SU-2026:1349-1

SUSE-SU-2026:1354-1

SUSE-SU-2026:1376-1

SUSE-SU-2026:1385-1

SUSE-SU-2026:1417-1

SUSE-SU-2026:1530-1

SUSE-SU-2026:1715-1

SUSE-SU-2026:21104-1

SUSE-SU-2026:21178-1

SUSE-SU-2026:21254-1

USN-8509-1

Produtos afetados

Linuxmint

Red Os

Rocky Linux

Http.Cookies

Referências · 191

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3644.json · Exploit
• https://github.com/python/cpython · Nota
• https://github.com/python/cpython/commit/d16ecc6c3626f0e2cc8f08c309c83934e8a979dd · Correção
• https://github.com/python/cpython/commit/57e88c1cf95e1481b94ae57abe1010469d47a6b4 · Correção
• https://github.com/python/cpython/commit/62ceb396fcbe69da1ded3702de586f4072b590dd · Correção
• https://github.com/python/cpython/issues/145599 · Nota
• https://github.com/python/cpython/commit/dae4b1a21f8df4570e30986affd61bbe4ade4cef · Correção
• https://github.com/python/cpython/commit/556aa098e738b127c714866f819b4abe2f7593d8 · Correção
• https://github.com/python/cpython/pull/145600 · Correção
• https://osv.dev/vulnerability/SUSE-SU-2026:1296-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:19177 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20261385-1 · Nota
• https://bugzilla.redhat.com/2418084 · Nota
• https://osv.dev/vulnerability/CVE-2026-3644 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-3644 · Aviso do Fabricante