CVE-2026-79824: HPE NonStop Python 3.x - Directory traversal vulnerability
Published Oct 15, 2026
·Updated
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
Affected Software
1 affected component
HPE NonStop Python=3.x
Event History
Oct 15, 2026
CVE Published
via MITRE·09:09 AM
Data Sourced
via MITRE·09:09 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attack vector is adjacent network access, and no privileges are required. Exploitation also requires user interaction.
2
What is the potential impact if exploitation succeeds?
The vulnerability is rated high severity and is assessed as having high impact on confidentiality, integrity, and availability. The described mechanism can overwrite arbitrary files.
3
Are affected versions or fixed releases identified?
The available information identifies HPE NonStop Python 3.x but does not provide specific affected or fixed version numbers. The referenced HPE advisory is the available source for product-specific remediation details.