CVE-2026-79824

A directory traversal vulnerability in HPE NonStop Python 3.x could allow  attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.

Score

CVSS 3.1 8.0 High

Status

Awaiting Analysis - security-alert@hpe.com

Published

2026-10-15

Last modified

2026-10-15

Weaknesses

CWE-30

Affected products

• Hpe Nonstop Python 3.x (Hewlett Packard Enterprise)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbns05148en_us&docLocale=en_US