{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-123806", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-11-06T15:27:56.226Z", "datePublished": "2026-11-09T20:18:45.481Z", "dateUpdated": "2026-11-09T20:18:45.481Z"}, "containers": {"cna": {"title": "python-tuf: Platform-dependent delegation path matching", "problemTypes": [{"descriptions": [{"cweId": "CWE-178", "lang": "en", "description": "CWE-178: Improper Handling of Case Sensitivity", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-qp9x-wp8f-qgjj", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-qp9x-wp8f-qgjj"}, {"name": "https://github.com/theupdateframework/python-tuf/commit/8ed4414946041030b264871ac41b929cf15774a5", "tags": ["x_refsource_MISC"], "url": "https://github.com/theupdateframework/python-tuf/commit/8ed4414946041030b264871ac41b929cf15774a5"}, {"name": "https://github.com/theupdateframework/python-tuf/releases/tag/v7.0.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/theupdateframework/python-tuf/releases/tag/v7.0.0"}], "affected": [{"vendor": "theupdateframework", "product": "python-tuf", "versions": [{"version": "< 7.0.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-09T20:18:45.481Z"}, "descriptions": [{"lang": "en", "value": "python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a TUF repository has path-based delegations that differ only by case and an attacker-controlled role is visited before the legitimate role, ngclient can accept an attacker-provided target from the wrong delegation for a requested path. Linux and macOS clients are not affected because their path normalization does not change case. This issue is fixed in 7.0.0."}], "source": {"advisory": "GHSA-qp9x-wp8f-qgjj", "discovery": "UNKNOWN"}}}}

{}

{"affected": [{"affectedData": [{"product": "python-tuf", "vendor": "theupdateframework", "versions": [{"status": "affected", "version": "< 7.0.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "python-tuf is a Python reference implementation of The Update Framework (TUF). Prior to 7.0.0, DelegatedRole._is_target_in_pathpattern in tuf/api/_payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a TUF repository has path-based delegations that differ only by case and an attacker-controlled role is visited before the legitimate role, ngclient can accept an attacker-provided target from the wrong delegation for a requested path. Linux and macOS clients are not affected because their path normalization does not change case. This issue is fixed in 7.0.0."}], "id": "CVE-2026-123806", "lastModified": "2026-11-09T22:18:36.503", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2026-11-09T22:18:36.503", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/theupdateframework/python-tuf/commit/8ed4414946041030b264871ac41b929cf15774a5"}, {"source": "security-advisories@github.com", "url": "https://github.com/theupdateframework/python-tuf/releases/tag/v7.0.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/theupdateframework/python-tuf/security/advisories/GHSA-qp9x-wp8f-qgjj"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-178"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{"bugzilla": {"description": "tuf: python-tuf: Unauthorized update delivery via case-insensitive path matching on Windows", "id": "2570304", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2570304"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "status": "draft"}, "cwe": "CWE-178", "details": ["A flaw was found in python-tuf. On Windows systems, delegation path pattern matching is performed case-insensitively due to platform-specific path normalization. In repositories with delegation patterns that differ only by letter case, an attacker controlling a delegated role can provide target files intended for a different role. Consequently, affected clients on Windows may accept unauthorized or malicious software updates."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-123806", "package_state": [{"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Fix deferred", "package_name": "rhoai/odh-model-registry-job-async-upload-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:trusted_artifact_signer:1", "fix_state": "Not affected", "package_name": "rhtas/model-transparency-rhel9", "product_name": "Red Hat Trusted Artifact Signer"}, {"cpe": "cpe:/a:redhat:trusted_artifact_signer:1", "fix_state": "Not affected", "package_name": "rhtas/rh-sigstore-a2a-rhel9", "product_name": "Red Hat Trusted Artifact Signer"}], "public_date": "2026-11-09T20:18:45Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-123806\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-123806\nhttps://github.com/theupdateframework/python-tuf/commit/8ed4414946041030b264871ac41b929cf15774a5\nhttps://github.com/theupdateframework/python-tuf/releases/tag/v7.0.0\nhttps://github.com/theupdateframework/python-tuf/security/advisories/GHSA-qp9x-wp8f-qgjj"], "statement": "This vulnerability is evaluated as Moderate severity because successful exploitation depends on specific repository delegation hierarchies and only manifests on case-insensitive platforms. In Red Hat environments, standard Linux path normalization retains exact casing during pattern matching, preventing unauthorized target delegation lookup. Consequently, Red Hat enterprise products are not exposed to this flaw under default configurations on supported Linux systems.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,7.0.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "python-tuf", "vendor": "theupdateframework"}], "created": "2026-11-09T21:45:16.268578+00:00", "updated": "2026-11-12T16:09:32.168174+00:00", "vendors": ["theupdateframework", "theupdateframework$PRODUCT$python-tuf"]}