Directory Traversal Vulnerability in HPE NonStop Python Affects Multiple Versions
CVE-2026-79824

8HIGH

Key Information:

Vendor

HP
Status
HP Nonstop Python 3.x
Vendor
CVE Published:
15 October 2026

What is CVE-2026-79824?

A directory traversal vulnerability in HPE NonStop Python 3.x permits attackers to manipulate file paths by utilizing sequences such as .. (dot dot) in file names within TAR archives. This could enable unauthorized file overwrites, leading to potential data loss and system integrity issues. It is crucial for organizations using this product to be aware of this vulnerability and take appropriate security measures.

Affected Version(s)

HPE NonStop Python 3.x T0993L01^AAL and earlier

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.