CVE-2026-7210 — The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Back Back to CVE browser

MEDIUM

The expat and elementtree parsers use insufficient entropy for XML hash-flooding protection

Published May 11, 2026

6.3

MEDIUM

CVSS 4.0

EPSS 1.35%

Description

`xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and applying this patch.

Affected products

Vendor Python Software Foundation Product CPython Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.10.22
- Version
  3.11.0
  Status
  affected
  Constraints
  <3.11.16
- Version
  3.12.0
  Status
  affected
  Constraints
  <3.12.14
- Version
  3.13.0
  Status
  affected
  Constraints
  <3.13.14
- Version
  3.14.0
  Status
  affected
  Constraints
  <3.14.6
- Version
  3.15.0a1
  Status
  affected
  Constraints
  <3.15.0b2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Python Software Foundation

CPython

unaffected

Version	Status	Constraints
0	affected	<3.10.22
3.11.0	affected	<3.11.16
3.12.0	affected	<3.12.14
3.13.0	affected	<3.13.14
3.14.0	affected	<3.14.6
3.15.0a1	affected	<3.15.0b2

Red Hat Hardened Images

python3-10-main-3.10.21-1.4.hum1

Fixed · RHSA-2026:69069
Red Hat Hardened Images

python3-11-main-3.11.16-1.4.hum1

Fixed · RHSA-2026:68135
Red Hat Hardened Images

python3-12-main-3.12.14-1.3.hum1

Fixed · RHSA-2026:68154
Red Hat Hardened Images

python3-13-main-3.13.15-1.3.hum1

Fixed · RHSA-2026:68309
Red Hat Hardened Images

python3-14-main-3.14.7-1.2.hum1

Fixed · RHSA-2026:67572
Exploit Intelligence

exploit-intelligence-tech-preview/vulnerability-analysis-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/model-opt-cuda-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-cpu-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-cuda-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-gaudi-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-neuron-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-rocm-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-spyre-rhel9

Fix deferred
Red Hat AI Inference Server

rhaii/vllm-tpu-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/model-opt-cuda-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-cpu-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-cuda-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-neuron-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-rocm-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-spyre-rhel9

Fix deferred
Red Hat AI Inference Server

rhaiis/vllm-tpu-rhel9

Fix deferred
Red Hat Enterprise Linux 10

python3.12

Fix deferred
Red Hat Enterprise Linux 10

python3.14

Fix deferred
Red Hat Enterprise Linux 6

python

Fix deferred
Red Hat Enterprise Linux 7

python

Fix deferred
Red Hat Enterprise Linux 7

python3

Fix deferred
Red Hat Enterprise Linux 8

python3

Fix deferred
Red Hat Enterprise Linux 8

python3.12

Fix deferred
Red Hat Enterprise Linux 8

python36:3.6/python36

Fix deferred
Red Hat Enterprise Linux 9

python3.12

Fix deferred
Red Hat Enterprise Linux 9

python3.14

Fix deferred
Red Hat Enterprise Linux 9

python3.9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-aws-cuda-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-azure-cuda-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-azure-rocm-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-cuda-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-gaudi-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-gcp-cuda-rhel9

Fix deferred
Red Hat Enterprise Linux AI (RHEL AI) 3

rhelai3/bootc-rocm-rhel9

Fix deferred
Red Hat Hardened Images

hi/python

Not affected
Red Hat OpenShift AI (RHOAI)

rhai/base-image-cpu-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-cuda-12.9-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-cuda-13.0-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-gaudi-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-neuron-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-rocm-6.4-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-rocm-7.0-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-rocm-7.1-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-spyre-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhai/base-image-tpu-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-automl-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-autorag-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-built-in-detector-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-caikit-nlp-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-caikit-tgis-serving-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-dashboard-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-feature-server-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-guardrails-detector-huggingface-runtime-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-autogluon-server-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-storage-initializer-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-llama-stack-core-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-llm-d-inference-scheduler-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-llm-d-kv-cache-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-llm-d-routing-sidecar-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-api-server-v2-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-runtime-generic-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mlflow-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-mlserver-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-model-registry-job-async-upload-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-modelmesh-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-modelmesh-runtime-adapter-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-must-gather-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-openvino-model-server-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-pipelines-components-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-rhaii-cluster-validator-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-rhaii-validator-tools-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-spark-operator-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-th06-cpu-torch210-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-th06-cpu-torch291-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-th06-cuda130-torch210-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-th06-cuda130-torch291-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-th06-rocm64-torch291-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-training-rocm64-torch29-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-trustyai-nemo-guardrails-server-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-trustyai-service-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-vllm-gaudi-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9

Fix deferred
Red Hat OpenShift AI (RHOAI)

rhoai/rhai-cli-rhel9

Fix deferred

Product	Package	State	Advisory
Red Hat Hardened Images	python3-10-main-3.10.21-1.4.hum1	Fixed	RHSA-2026:69069
Red Hat Hardened Images	python3-11-main-3.11.16-1.4.hum1	Fixed	RHSA-2026:68135
Red Hat Hardened Images	python3-12-main-3.12.14-1.3.hum1	Fixed	RHSA-2026:68154
Red Hat Hardened Images	python3-13-main-3.13.15-1.3.hum1	Fixed	RHSA-2026:68309
Red Hat Hardened Images	python3-14-main-3.14.7-1.2.hum1	Fixed	RHSA-2026:67572
Exploit Intelligence	exploit-intelligence-tech-preview/vulnerability-analysis-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/model-opt-cuda-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-cpu-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-cuda-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-gaudi-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-neuron-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-rocm-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-spyre-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaii/vllm-tpu-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/model-opt-cuda-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-cpu-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-cuda-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-neuron-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-rocm-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-spyre-rhel9	Fix deferred	n/a
Red Hat AI Inference Server	rhaiis/vllm-tpu-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux 10	python3.12	Fix deferred	n/a
Red Hat Enterprise Linux 10	python3.14	Fix deferred	n/a
Red Hat Enterprise Linux 6	python	Fix deferred	n/a
Red Hat Enterprise Linux 7	python	Fix deferred	n/a
Red Hat Enterprise Linux 7	python3	Fix deferred	n/a
Red Hat Enterprise Linux 8	python3	Fix deferred	n/a
Red Hat Enterprise Linux 8	python3.12	Fix deferred	n/a
Red Hat Enterprise Linux 8	python36:3.6/python36	Fix deferred	n/a
Red Hat Enterprise Linux 9	python3.12	Fix deferred	n/a
Red Hat Enterprise Linux 9	python3.14	Fix deferred	n/a
Red Hat Enterprise Linux 9	python3.9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-aws-cuda-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-azure-cuda-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-azure-rocm-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-cuda-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-gaudi-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-gcp-cuda-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rhelai3/bootc-rocm-rhel9	Fix deferred	n/a
Red Hat Hardened Images	hi/python	Not affected	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-cpu-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-cuda-12.9-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-cuda-13.0-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-gaudi-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-neuron-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-rocm-6.4-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-rocm-7.0-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-rocm-7.1-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-spyre-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhai/base-image-tpu-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-automl-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-autorag-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-built-in-detector-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-caikit-nlp-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-caikit-tgis-serving-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-dashboard-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-feature-server-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-guardrails-detector-huggingface-runtime-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-autogluon-server-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-storage-initializer-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-llama-stack-core-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-llm-d-inference-scheduler-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-llm-d-kv-cache-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-llm-d-routing-sidecar-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-api-server-v2-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-runtime-generic-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mlflow-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-mlserver-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-model-registry-job-async-upload-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-modelmesh-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-modelmesh-runtime-adapter-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-must-gather-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-openvino-model-server-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-pipelines-components-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-rhaii-cluster-validator-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-rhaii-validator-tools-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-spark-operator-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-th06-cpu-torch210-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-th06-cpu-torch291-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-th06-cuda130-torch210-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-th06-cuda130-torch291-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-th06-rocm64-torch291-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-training-rocm64-torch29-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-trustyai-nemo-guardrails-server-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-trustyai-service-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-vllm-gaudi-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9	Fix deferred	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/rhai-cli-rhel9	Fix deferred	n/a

Remediation

Red Hat statement

The impact from this flaw is limited to a denial of service in the Python runtime. Host Red Hat systems are not affected in their default configurations.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

Metrics

1.35% 0.01351

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01351

Score over time

May–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.35% (0.01351)	70.49th	v5 (v2026.06.15)
Jun 15, 2026	0.81% (0.00807)	51.85th	v5 (v2026.06.15)
May 12, 2026	0.04% (0.00045)	13.92th	v4 (v2025.03.14)

Weaknesses (1)

CWE-331

References (16)

http://www.openwall.com/lists/oss-security/2026/05/11/13
Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2026/05/11/8
Mailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2026-7210
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2469216
Issue Tracking
https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4
patch
https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566
patch
https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56
patch
https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b
patch
https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286
patch
https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a
patch
https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f
patch
https://github.com/python/cpython/issues/149018
issue-trackingIssue Tracking
https://github.com/python/cpython/pull/149023
patchIssue Tracking
https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/
vendor-advisoryMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-7210
https://www.cve.org/CVERecord?id=CVE-2026-7210

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2026/05/11/13		Mailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2026/05/11/8		Mailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2026-7210		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2469216		Issue Tracking
https://github.com/python/cpython/commit/24b8f12544468e4cedf5bfbe25442fcd495391e4		patch
https://github.com/python/cpython/commit/3573b3b1ecbd99030a0b18658e1bfece771b2566		patch
https://github.com/python/cpython/commit/cbaecf9f16da611a646d507c1cbca265c588fc56		patch
https://github.com/python/cpython/commit/e37df2a6a71d6538698e2d3188a7c345b827640b		patch
https://github.com/python/cpython/commit/ea70712d1a8508e14e9677d44f838dab04dc0286		patch
https://github.com/python/cpython/commit/eeea765cb9d8f1fc3d8918b272ac3c477983f27a		patch
https://github.com/python/cpython/commit/fc9b11ff49cbc82e6f917d07a61517a2b5f3145f		patch
https://github.com/python/cpython/issues/149018		issue-trackingIssue Tracking
https://github.com/python/cpython/pull/149023		patchIssue Tracking
https://mail.python.org/archives/list/security-announce@python.org/thread/PNY5OMBDPM2FRUZTWFFPJ6LISWKV627K/		vendor-advisoryMailing ListThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-7210
https://www.cve.org/CVERecord?id=CVE-2026-7210