CVE-2026-79824

High · 8.0

CVSS

8.0

EPSS

0.5%

Published

Oct 15, 2026

CISA due date

—

The record

A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.

Affected packages

Ecosystem	Package	Introduced	Fixed