Skip to content
Fencer Intel
medium 4.4

CVE-2026-25645 json

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

published 7mo ago modified last mo. also EUVD-2026-15754 , GHSA-gc5v-m9x4-r6x2 , PYSEC-2026-2275

cvss
4.4
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 8%
public exploits
0
none known

Summary

Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker with write access to the temp directory could pre-create a malicious file that would be loaded in place of the legitimate one. Standard usage of the Requests library is not affected by this vulnerability. Only applications that call `extract_zipped_paths()` directly are impacted. Starting in version 2.33.0, the library extracts files to a non-deterministic location. If developers are unable to upgrade, they can set `TMPDIR` in their environment to a directory with restricted write access.

Patch / fix

  • pypi requests 2.33.0
  • python requests 2.33.0
  • requests Debian 14 2.34.2-1

debian advisories DEBIAN-CVE-2026-25645

  • requests Ubuntu 22.04 LTS 2.25.1+dfsg-2ubuntu0.4
  • requests Ubuntu 24.04 LTS 2.31.0+dfsg-1ubuntu1.2
  • requests Ubuntu 26.04 LTS 2.32.5+dfsg-1ubuntu1.1
  • requests Ubuntu Pro 20.04 LTS 2.22.0-2ubuntu1.1+esm2

ubuntu advisories UBUNTU-CVE-2026-25645

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • python-requests SLES 16.0, Linux Micro 6.2, SLES for SAP applications 16.0 2.32.4-160000.3.1
  • python-requests SLES LTSS Extended Security 12 SP5, SLE Module for Public Cloud 12 2.24.0-8.26.1
  • python-requests Linux Micro 6.1 2.32.4-slfo.1.1_2.1
  • python-requests Linux Micro 6.0 2.32.3-3.1

suse advisories SUSE-SU-2026:22055-1SUSE-SU-2026:22091-1SUSE-SU-2026:1218-1SUSE-SU-2026:21036-1SUSE-SU-2026:21063-1

  • python-requests openSUSE Leap 16.0 2.32.4-160000.3.1
  • python-requests openSUSE Tumbleweed 2.33.0-1.1

opensuse advisories openSUSE-SU-2026:20926-1openSUSE-SU-2026:10455-1

  • py3-requests Alpine 3.24, Alpine 3.23, Alpine 3.22 +2 more 2.33.1-r0

alpine advisories ALPINE-CVE-2026-25645

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • python-requests Azure Linux 3.0 2.31.0-4

azure linux advisories AZL-80996

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Is CVE-2026-25645 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-25645 updated cvss 4.7

requests: Requests: Security bypass due to predictable temporary file creation

  • Red Hat External Secrets Operator for Red Hat OpenShift external-secrets-operator/external-secrets-rhel9, external-secrets-operator/bitwarden-sdk-server-rhel9, external-secrets-operator/external-secrets-operator-rhel9, external-secrets-operator/external-secrets-operator-bundle Red Hat Lightspeed Core lightspeed-core/rag-tool-rhel9, lightspeed-core/lightspeed-stack-rhel9, lightspeed-core/dataverse-exporter-rhel9 Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/logging-curator5-rhel9 Red Hat Migration Toolkit for Containers rhmtc/openshift-migration-rhel8-operator Red Hat Migration Toolkit for Virtualization mtv-candidate/mtv-rhel9-operator, migration-toolkit-virtualization/mtv-rhel9-operator Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-ocp-rag-rhel9, openshift-lightspeed/lightspeed-service-api-rhel9, openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9, openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9
    +19 more products
    Red Hat OpenShift Service Mesh 3 openshift-service-mesh/kiali-rhel9-operator Red Hat Pen Drive Powered by Red Hat Lightspeed pen-drive/pen-drive-scanner-rhel9 Red Hat AI Inference Server rhaiis/vllm-cpu-rhel9, rhaiis/vllm-tpu-rhel9, rhaiis/vllm-cuda-rhel9, rhaiis/vllm-rocm-rhel9, rhaiis/vllm-spyre-rhel9, rhaiis/vllm-neuron-rhel9, +2 more Red Hat Ansible Automation Platform 2 automation-controller, ansible-automation-platform-26/hub-rhel9, ansible-automation-platform-26/gateway-rhel9, ansible-automation-platform-24/lightspeed-rhel8, ansible-automation-platform-25/de-minimal-rhel8, ansible-automation-platform-25/de-minimal-rhel9, +21 more Red Hat Ansible Automation Platform Ansible Core 2 ansible-automation-platform/ee-minimal-rhel8, ansible-automation-platform/ee-minimal-rhel9, ansible-automation-platform-tech-preview/ee-minimal-rhel8, ansible-automation-platform-tech-preview/ee-minimal-rhel9 Red Hat build of Quarkus Native builder quarkus-mandrel#109bb34d7147bcc055f0f7f53427ebb8cb02f86d, quarkus-mandrel#602dee7389eeb13bfb88aa7242da02d0161ee946 Red Hat Developer Hub 1 rhdh/rhdh-hub-rhel9 Red Hat Discovery 2 discovery/discovery-server-rhel9 Red Hat Enterprise Linux 7 python-pip, python3-pip Red Hat Enterprise Linux 8 python-pip, python3-pip, fence-agents, python3.11-pip, python3.12-pip, resource-agents, +55 more Red Hat Enterprise Linux 9 fence-virt, python-pip, fence-virtd, python3-pip, fence-agents, python3.11-pip, +70 more Red Hat Enterprise Linux 10 python-pip, python3.14-pip Red Hat Enterprise Linux AI (RHEL AI) 3 rhelai3/bootc-rocm-rhel9, rhelai3/bootc-azure-rocm-rhel9 Red Hat OpenShift AI (RHOAI) rhoai/odh-cli-rhel9, rhoai/rhai-cli-rhel9, rhoai/odh-mlflow-rhel9, rhoai/odh-vllm-cpu-rhel9, rhoai/odh-vllm-cuda-rhel9, rhoai/odh-vllm-rocm-rhel9, +50 more Red Hat OpenShift Container Platform 4 openshift4/ose-olm-catalogd-rhel9, openshift4/ztp-site-generate-rhel8, openshift4/ose-ansible-rhel9-operator, openshift4/ose-agent-installer-api-server-rhel9 Red Hat Quay 3 quay/quay-rhel8, quay/quay-rhel9 Red Hat Satellite 6 satellite/iop-vmaas-rhel9, satellite/iop-puptoo-rhel9, satellite/iop-yuptoo-rhel9, satellite/foreman-mcp-server-rhel9, satellite/iop-advisor-engine-rhel9, satellite/iop-host-inventory-rhel9, +6 more Red Hat Trusted Artifact Signer rhtas/segment-reporting-rhel9, rhtas/model-transparency-rhel9 Red Hat Service Telemetry Framework 1.5 stf/smart-gateway-rhel9-operator, stf/service-telemetry-rhel9-operator
    affected: workaround, no fix available “Fix deferred”
  • Red Hat AI Inference Server 3.4 rhaii/model-opt-cuda-rhel9 1787151832
    fixed: vendor fix RHSA-2026:57383
  • Red Hat Enterprise Linux AI 3.4 rhelai3/bootc-cuda-rhel9 1787243961, rhelai3/bootc-aws-cuda-rhel9 1787253912, rhelai3/bootc-gcp-cuda-rhel9 1787253774, rhelai3/disk-image-cuda-rhel9 1787310717, rhelai3/bootc-azure-cuda-rhel9 1787253989
    fixed: vendor fix RHSA-2026:59151
  • Red Hat Openshift Data Foundation 4.18 odf4/cephcsi-rhel9 1786705347, odf4/odf-cli-rhel9 1786705938, odf4/mcg-core-rhel9 1786705558, odf4/odf-console-rhel9 1786706577, odf4/mcg-rhel9-operator 1786705646, odf4/ocs-rhel9-operator 1786705802, +13 more
    fixed: vendor fix RHSA-2026:56431
  • Red Hat Enterprise Linux AI 3.4 rhelai3/bootc-rocm-rhel9 1787244006, rhelai3/bootc-azure-rocm-rhel9 1787254059 Red Hat Openshift Data Foundation 4.18 odf4/mcg-operator-bundle 1786708633, odf4/ocs-operator-bundle 1786708778, odf4/odf-operator-bundle 1786709119, odf4/cephcsi-operator-bundle 1786708508, odf4/odr-hub-operator-bundle 1786709184, odf4/rook-ceph-operator-bundle 1786709254, +7 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
7mo ago

Exploit prediction

0.19% chance of exploitation in the next 30 days, higher than 8% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
GitHub 3.1 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
NVD 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
OSV 3.1 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected packages

ecosystem package affected fixed in
pypi requests
<2.33.0
2.33.0

Affected products

  • psf requests

Classification

Weakness
  • CWE-377 DEPRECATED: Insecure Temporary File

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.