{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-27941", "tracking": { "current_release_date": "2026-03-23T03:05:26.446797Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-27941", "initial_release_date": "2026-02-26T01:38:43.586601Z", "revision_history": [ { "date": "2026-02-26T01:38:43.586601Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (1).| References created (2).| CWES updated (1)." }, { "date": "2026-02-26T01:38:50.459165Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-02-26T02:25:06.504281Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (2).| CWES updated (1)." }, { "date": "2026-02-26T02:25:13.193711Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-02-26T11:44:35.848847Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (232).| References created (4).| CWES updated (1)." }, { "date": "2026-02-26T11:44:53.486845Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-02-26T14:13:23.862053Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-02-26T14:13:26.419341Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-02-26T16:46:57.908404Z", "number": "9", "summary": "Unknown change." }, { "date": "2026-03-02T19:28:24.408162Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-03-06T20:25:57.998786Z", "number": "11", "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-03-06T20:26:02.058902Z", "number": "12", "summary": "NCSC Score updated." }, { "date": "2026-03-20T09:39:25.881162Z", "number": "13", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-20T09:39:28.426337Z", "number": "14", "summary": "NCSC Score updated." } ], "status": "interim", "version": "14" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.0.1", "product": { "name": "vers:unknown/0.0.1", "product_id": "CSAFPID-5729239" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.2", "product": { "name": "vers:unknown/0.0.2", "product_id": "CSAFPID-5729240" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.3", "product": { "name": "vers:unknown/0.0.3", "product_id": "CSAFPID-5729241" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.4", "product": { "name": "vers:unknown/0.0.4", "product_id": "CSAFPID-5729242" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.5", "product": { "name": "vers:unknown/0.0.5", "product_id": "CSAFPID-5729243" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.6", "product": { "name": "vers:unknown/0.0.6", "product_id": "CSAFPID-5729244" } }, { "category": "product_version_range", "name": "vers:unknown/0.0.7", "product": { "name": "vers:unknown/0.0.7", "product_id": "CSAFPID-5729245" } }, { "category": "product_version_range", "name": "vers:unknown/0.1.0", "product": { "name": "vers:unknown/0.1.0", "product_id": "CSAFPID-5729246" } }, { "category": "product_version_range", "name": "vers:unknown/0.1.1", "product": { "name": "vers:unknown/0.1.1", "product_id": "CSAFPID-5729247" } }, { "category": "product_version_range", "name": "vers:unknown/0.1.2", "product": { "name": "vers:unknown/0.1.2", "product_id": "CSAFPID-5729248" } }, { "category": "product_version_range", "name": "vers:unknown/0.1.3", "product": { "name": "vers:unknown/0.1.3", "product_id": "CSAFPID-5729249" } }, { "category": "product_version_range", "name": "vers:unknown/1.34.9", "product": { "name": "vers:unknown/1.34.9", "product_id": "CSAFPID-5729250" } }, { "category": "product_version_range", "name": "vers:unknown/<1.37.1", "product": { "name": "vers:unknown/<1.37.1", "product_id": "CSAFPID-5723440" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-0.1.4", "product": { "name": "vers:unknown/openlit-0.1.4", "product_id": "CSAFPID-5729251" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.0.0", "product": { "name": "vers:unknown/openlit-1.0.0", "product_id": "CSAFPID-5729252" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.1.0", "product": { "name": "vers:unknown/openlit-1.1.0", "product_id": "CSAFPID-5729253" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.10.0", "product": { "name": "vers:unknown/openlit-1.10.0", "product_id": "CSAFPID-5729254" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.0", "product": { "name": "vers:unknown/openlit-1.11.0", "product_id": "CSAFPID-5729255" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.1", "product": { "name": "vers:unknown/openlit-1.11.1", "product_id": "CSAFPID-5729256" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.10", "product": { "name": "vers:unknown/openlit-1.11.10", "product_id": "CSAFPID-5729257" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.2", "product": { "name": "vers:unknown/openlit-1.11.2", "product_id": "CSAFPID-5729258" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.3", "product": { "name": "vers:unknown/openlit-1.11.3", "product_id": "CSAFPID-5729259" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.4", "product": { "name": "vers:unknown/openlit-1.11.4", "product_id": "CSAFPID-5729260" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.5", "product": { "name": "vers:unknown/openlit-1.11.5", "product_id": "CSAFPID-5729261" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.6", "product": { "name": "vers:unknown/openlit-1.11.6", "product_id": "CSAFPID-5729262" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.7", "product": { "name": "vers:unknown/openlit-1.11.7", "product_id": "CSAFPID-5729263" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.8", "product": { "name": "vers:unknown/openlit-1.11.8", "product_id": "CSAFPID-5729264" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.11.9", "product": { "name": "vers:unknown/openlit-1.11.9", "product_id": "CSAFPID-5729265" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.12.0", "product": { "name": "vers:unknown/openlit-1.12.0", "product_id": "CSAFPID-5729266" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.12.1", "product": { "name": "vers:unknown/openlit-1.12.1", "product_id": "CSAFPID-5729267" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.12.2", "product": { "name": "vers:unknown/openlit-1.12.2", "product_id": "CSAFPID-5729268" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.12.3", "product": { "name": "vers:unknown/openlit-1.12.3", "product_id": "CSAFPID-5729269" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.12.4", "product": { "name": "vers:unknown/openlit-1.12.4", "product_id": "CSAFPID-5729270" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.13.0", "product": { "name": "vers:unknown/openlit-1.13.0", "product_id": "CSAFPID-5729271" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.13.1", "product": { "name": "vers:unknown/openlit-1.13.1", "product_id": "CSAFPID-5729272" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.13.2", "product": { "name": "vers:unknown/openlit-1.13.2", "product_id": "CSAFPID-5729273" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.13.3", "product": { "name": "vers:unknown/openlit-1.13.3", "product_id": "CSAFPID-5729274" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.0", "product": { "name": "vers:unknown/openlit-1.14.0", "product_id": "CSAFPID-5729275" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.1", "product": { "name": "vers:unknown/openlit-1.14.1", "product_id": "CSAFPID-5729276" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.4", "product": { "name": "vers:unknown/openlit-1.14.4", "product_id": "CSAFPID-5729277" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.5", "product": { "name": "vers:unknown/openlit-1.14.5", "product_id": "CSAFPID-5729278" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.6", "product": { "name": "vers:unknown/openlit-1.14.6", "product_id": "CSAFPID-5729279" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.14.7", "product": { "name": "vers:unknown/openlit-1.14.7", "product_id": "CSAFPID-5729280" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.15.0", "product": { "name": "vers:unknown/openlit-1.15.0", "product_id": "CSAFPID-5729281" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.15.1", "product": { "name": "vers:unknown/openlit-1.15.1", "product_id": "CSAFPID-5729282" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.15.2", "product": { "name": "vers:unknown/openlit-1.15.2", "product_id": "CSAFPID-5729283" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.15.3", "product": { "name": "vers:unknown/openlit-1.15.3", "product_id": "CSAFPID-5729284" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.15.4", "product": { "name": "vers:unknown/openlit-1.15.4", "product_id": "CSAFPID-5729285" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.16.0", "product": { "name": "vers:unknown/openlit-1.16.0", "product_id": "CSAFPID-5729286" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.2.0", "product": { "name": "vers:unknown/openlit-1.2.0", "product_id": "CSAFPID-5729287" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.3.0", "product": { "name": "vers:unknown/openlit-1.3.0", "product_id": "CSAFPID-5729288" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.4.0", "product": { "name": "vers:unknown/openlit-1.4.0", "product_id": "CSAFPID-5729289" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.5.0", "product": { "name": "vers:unknown/openlit-1.5.0", "product_id": "CSAFPID-5729290" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.6.0", "product": { "name": "vers:unknown/openlit-1.6.0", "product_id": "CSAFPID-5729291" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.7.0", "product": { "name": "vers:unknown/openlit-1.7.0", "product_id": "CSAFPID-5729292" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.8.0", "product": { "name": "vers:unknown/openlit-1.8.0", "product_id": "CSAFPID-5729293" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.9.0", "product": { "name": "vers:unknown/openlit-1.9.0", "product_id": "CSAFPID-5729294" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.9.1", "product": { "name": "vers:unknown/openlit-1.9.1", "product_id": "CSAFPID-5729295" } }, { "category": "product_version_range", "name": "vers:unknown/openlit-1.9.2", "product": { "name": "vers:unknown/openlit-1.9.2", "product_id": "CSAFPID-5729296" } }, { "category": "product_version_range", "name": "vers:unknown/operator-0.0.1", "product": { "name": "vers:unknown/operator-0.0.1", "product_id": "CSAFPID-5729297" } }, { "category": "product_version_range", "name": "vers:unknown/otel-gpu-collector-0.0.1", "product": { "name": "vers:unknown/otel-gpu-collector-0.0.1", "product_id": "CSAFPID-5729298" } }, { "category": "product_version_range", "name": "vers:unknown/otel-gpu-collector-0.0.2", "product": { "name": "vers:unknown/otel-gpu-collector-0.0.2", "product_id": "CSAFPID-5729299" } }, { "category": "product_version_range", "name": "vers:unknown/otel-gpu-collector-0.0.3", "product": { "name": "vers:unknown/otel-gpu-collector-0.0.3", "product_id": "CSAFPID-5729300" } }, { "category": "product_version_range", "name": "vers:unknown/py-0.0.3", "product": { "name": "vers:unknown/py-0.0.3", "product_id": "CSAFPID-5729301" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.0.0", "product": { "name": "vers:unknown/py-1.0.0", "product_id": "CSAFPID-5729302" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.1.0", "product": { "name": "vers:unknown/py-1.1.0", "product_id": "CSAFPID-5729303" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.1.1", "product": { "name": "vers:unknown/py-1.1.1", "product_id": "CSAFPID-5729304" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.1.2", "product": { "name": "vers:unknown/py-1.1.2", "product_id": "CSAFPID-5729305" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.1.3", "product": { "name": "vers:unknown/py-1.1.3", "product_id": "CSAFPID-5729306" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.10.0", "product": { "name": "vers:unknown/py-1.10.0", "product_id": "CSAFPID-5729307" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.11.0", "product": { "name": "vers:unknown/py-1.11.0", "product_id": "CSAFPID-5729308" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.12.0", "product": { "name": "vers:unknown/py-1.12.0", "product_id": "CSAFPID-5729309" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.13.0", "product": { "name": "vers:unknown/py-1.13.0", "product_id": "CSAFPID-5729310" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.14.0", "product": { "name": "vers:unknown/py-1.14.0", "product_id": "CSAFPID-5729311" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.14.1", "product": { "name": "vers:unknown/py-1.14.1", "product_id": "CSAFPID-5729312" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.14.2", "product": { "name": "vers:unknown/py-1.14.2", "product_id": "CSAFPID-5729313" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.15.0", "product": { "name": "vers:unknown/py-1.15.0", "product_id": "CSAFPID-5729314" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.16.0", "product": { "name": "vers:unknown/py-1.16.0", "product_id": "CSAFPID-5729315" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.16.1", "product": { "name": "vers:unknown/py-1.16.1", "product_id": "CSAFPID-5729316" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.16.2", "product": { "name": "vers:unknown/py-1.16.2", "product_id": "CSAFPID-5729317" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.17.0", "product": { "name": "vers:unknown/py-1.17.0", "product_id": "CSAFPID-5729318" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.18.0", "product": { "name": "vers:unknown/py-1.18.0", "product_id": "CSAFPID-5729319" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.18.1", "product": { "name": "vers:unknown/py-1.18.1", "product_id": "CSAFPID-5729320" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.18.2", "product": { "name": "vers:unknown/py-1.18.2", "product_id": "CSAFPID-5729321" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.19.0", "product": { "name": "vers:unknown/py-1.19.0", "product_id": "CSAFPID-5729322" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.2.0", "product": { "name": "vers:unknown/py-1.2.0", "product_id": "CSAFPID-5729323" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.20.0", "product": { "name": "vers:unknown/py-1.20.0", "product_id": "CSAFPID-5729324" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.21.0", "product": { "name": "vers:unknown/py-1.21.0", "product_id": "CSAFPID-5729325" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.0", "product": { "name": "vers:unknown/py-1.22.0", "product_id": "CSAFPID-5729326" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.1", "product": { "name": "vers:unknown/py-1.22.1", "product_id": "CSAFPID-5729327" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.2", "product": { "name": "vers:unknown/py-1.22.2", "product_id": "CSAFPID-5729328" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.3", "product": { "name": "vers:unknown/py-1.22.3", "product_id": "CSAFPID-5729329" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.4", "product": { "name": "vers:unknown/py-1.22.4", "product_id": "CSAFPID-5729330" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.22.5", "product": { "name": "vers:unknown/py-1.22.5", "product_id": "CSAFPID-5729331" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.23.0", "product": { "name": "vers:unknown/py-1.23.0", "product_id": "CSAFPID-5729332" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.24.0", "product": { "name": "vers:unknown/py-1.24.0", "product_id": "CSAFPID-5729333" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.24.1", "product": { "name": "vers:unknown/py-1.24.1", "product_id": "CSAFPID-5729334" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.25.0", "product": { "name": "vers:unknown/py-1.25.0", "product_id": "CSAFPID-5729335" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.26.0", "product": { "name": "vers:unknown/py-1.26.0", "product_id": "CSAFPID-5729336" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.27.0", "product": { "name": "vers:unknown/py-1.27.0", "product_id": "CSAFPID-5729337" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.27.1", "product": { "name": "vers:unknown/py-1.27.1", "product_id": "CSAFPID-5729338" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.28.0", "product": { "name": "vers:unknown/py-1.28.0", "product_id": "CSAFPID-5729339" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.29.0", "product": { "name": "vers:unknown/py-1.29.0", "product_id": "CSAFPID-5729340" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.29.1", "product": { "name": "vers:unknown/py-1.29.1", "product_id": "CSAFPID-5729341" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.29.2", "product": { "name": "vers:unknown/py-1.29.2", "product_id": "CSAFPID-5729342" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.29.3", "product": { "name": "vers:unknown/py-1.29.3", "product_id": "CSAFPID-5729343" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.29.4", "product": { "name": "vers:unknown/py-1.29.4", "product_id": "CSAFPID-5729344" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.3.0", "product": { "name": "vers:unknown/py-1.3.0", "product_id": "CSAFPID-5729345" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.0", "product": { "name": "vers:unknown/py-1.30.0", "product_id": "CSAFPID-5729346" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.1", "product": { "name": "vers:unknown/py-1.30.1", "product_id": "CSAFPID-5729347" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.2", "product": { "name": "vers:unknown/py-1.30.2", "product_id": "CSAFPID-5729348" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.3", "product": { "name": "vers:unknown/py-1.30.3", "product_id": "CSAFPID-5729349" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.4", "product": { "name": "vers:unknown/py-1.30.4", "product_id": "CSAFPID-5729350" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.30.5", "product": { "name": "vers:unknown/py-1.30.5", "product_id": "CSAFPID-5729351" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.31.0", "product": { "name": "vers:unknown/py-1.31.0", "product_id": "CSAFPID-5729352" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.31.1", "product": { "name": "vers:unknown/py-1.31.1", "product_id": "CSAFPID-5729353" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.0", "product": { "name": "vers:unknown/py-1.32.0", "product_id": "CSAFPID-5729354" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.1", "product": { "name": "vers:unknown/py-1.32.1", "product_id": "CSAFPID-5729355" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.10", "product": { "name": "vers:unknown/py-1.32.10", "product_id": "CSAFPID-5729356" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.11", "product": { "name": "vers:unknown/py-1.32.11", "product_id": "CSAFPID-5729357" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.12", "product": { "name": "vers:unknown/py-1.32.12", "product_id": "CSAFPID-5729358" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.2", "product": { "name": "vers:unknown/py-1.32.2", "product_id": "CSAFPID-5729359" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.3", "product": { "name": "vers:unknown/py-1.32.3", "product_id": "CSAFPID-5729360" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.4", "product": { "name": "vers:unknown/py-1.32.4", "product_id": "CSAFPID-5729361" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.5", "product": { "name": "vers:unknown/py-1.32.5", "product_id": "CSAFPID-5729362" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.6", "product": { "name": "vers:unknown/py-1.32.6", "product_id": "CSAFPID-5729363" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.7", "product": { "name": "vers:unknown/py-1.32.7", "product_id": "CSAFPID-5729364" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.8", "product": { "name": "vers:unknown/py-1.32.8", "product_id": "CSAFPID-5729365" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.32.9", "product": { "name": "vers:unknown/py-1.32.9", "product_id": "CSAFPID-5729366" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.0", "product": { "name": "vers:unknown/py-1.33.0", "product_id": "CSAFPID-5729367" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.1", "product": { "name": "vers:unknown/py-1.33.1", "product_id": "CSAFPID-5729368" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.10", "product": { "name": "vers:unknown/py-1.33.10", "product_id": "CSAFPID-5729369" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.11", "product": { "name": "vers:unknown/py-1.33.11", "product_id": "CSAFPID-5729370" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.12", "product": { "name": "vers:unknown/py-1.33.12", "product_id": "CSAFPID-5729371" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.13", "product": { "name": "vers:unknown/py-1.33.13", "product_id": "CSAFPID-5729372" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.14", "product": { "name": "vers:unknown/py-1.33.14", "product_id": "CSAFPID-5729373" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.15", "product": { "name": "vers:unknown/py-1.33.15", "product_id": "CSAFPID-5729374" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.16", "product": { "name": "vers:unknown/py-1.33.16", "product_id": "CSAFPID-5729375" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.17", "product": { "name": "vers:unknown/py-1.33.17", "product_id": "CSAFPID-5729376" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.18", "product": { "name": "vers:unknown/py-1.33.18", "product_id": "CSAFPID-5729377" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.19", "product": { "name": "vers:unknown/py-1.33.19", "product_id": "CSAFPID-5729378" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.2", "product": { "name": "vers:unknown/py-1.33.2", "product_id": "CSAFPID-5729379" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.20", "product": { "name": "vers:unknown/py-1.33.20", "product_id": "CSAFPID-5729380" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.21", "product": { "name": "vers:unknown/py-1.33.21", "product_id": "CSAFPID-5729381" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.22", "product": { "name": "vers:unknown/py-1.33.22", "product_id": "CSAFPID-5729382" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.23", "product": { "name": "vers:unknown/py-1.33.23", "product_id": "CSAFPID-5729383" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.3", "product": { "name": "vers:unknown/py-1.33.3", "product_id": "CSAFPID-5729384" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.5", "product": { "name": "vers:unknown/py-1.33.5", "product_id": "CSAFPID-5729385" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.6", "product": { "name": "vers:unknown/py-1.33.6", "product_id": "CSAFPID-5729386" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.7", "product": { "name": "vers:unknown/py-1.33.7", "product_id": "CSAFPID-5729387" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.8", "product": { "name": "vers:unknown/py-1.33.8", "product_id": "CSAFPID-5729388" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.33.9", "product": { "name": "vers:unknown/py-1.33.9", "product_id": "CSAFPID-5729389" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.0", "product": { "name": "vers:unknown/py-1.34.0", "product_id": "CSAFPID-5729390" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.1", "product": { "name": "vers:unknown/py-1.34.1", "product_id": "CSAFPID-5729391" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.10", "product": { "name": "vers:unknown/py-1.34.10", "product_id": "CSAFPID-5729392" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.11", "product": { "name": "vers:unknown/py-1.34.11", "product_id": "CSAFPID-5729393" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.12", "product": { "name": "vers:unknown/py-1.34.12", "product_id": "CSAFPID-5729394" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.13", "product": { "name": "vers:unknown/py-1.34.13", "product_id": "CSAFPID-5729395" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.14", "product": { "name": "vers:unknown/py-1.34.14", "product_id": "CSAFPID-5729396" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.15", "product": { "name": "vers:unknown/py-1.34.15", "product_id": "CSAFPID-5729397" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.16", "product": { "name": "vers:unknown/py-1.34.16", "product_id": "CSAFPID-5729398" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.17", "product": { "name": "vers:unknown/py-1.34.17", "product_id": "CSAFPID-5729399" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.18", "product": { "name": "vers:unknown/py-1.34.18", "product_id": "CSAFPID-5729400" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.19", "product": { "name": "vers:unknown/py-1.34.19", "product_id": "CSAFPID-5729401" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.2", "product": { "name": "vers:unknown/py-1.34.2", "product_id": "CSAFPID-5729402" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.20", "product": { "name": "vers:unknown/py-1.34.20", "product_id": "CSAFPID-5729403" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.21", "product": { "name": "vers:unknown/py-1.34.21", "product_id": "CSAFPID-5729404" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.22", "product": { "name": "vers:unknown/py-1.34.22", "product_id": "CSAFPID-5729405" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.23", "product": { "name": "vers:unknown/py-1.34.23", "product_id": "CSAFPID-5729406" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.24", "product": { "name": "vers:unknown/py-1.34.24", "product_id": "CSAFPID-5729407" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.25", "product": { "name": "vers:unknown/py-1.34.25", "product_id": "CSAFPID-5729408" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.26", "product": { "name": "vers:unknown/py-1.34.26", "product_id": "CSAFPID-5729409" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.27", "product": { "name": "vers:unknown/py-1.34.27", "product_id": "CSAFPID-5729410" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.28", "product": { "name": "vers:unknown/py-1.34.28", "product_id": "CSAFPID-5729411" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.29", "product": { "name": "vers:unknown/py-1.34.29", "product_id": "CSAFPID-5729412" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.3", "product": { "name": "vers:unknown/py-1.34.3", "product_id": "CSAFPID-5729413" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.30", "product": { "name": "vers:unknown/py-1.34.30", "product_id": "CSAFPID-5729414" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.31", "product": { "name": "vers:unknown/py-1.34.31", "product_id": "CSAFPID-5729415" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.32", "product": { "name": "vers:unknown/py-1.34.32", "product_id": "CSAFPID-5729416" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.33", "product": { "name": "vers:unknown/py-1.34.33", "product_id": "CSAFPID-5729417" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.34", "product": { "name": "vers:unknown/py-1.34.34", "product_id": "CSAFPID-5729418" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.35", "product": { "name": "vers:unknown/py-1.34.35", "product_id": "CSAFPID-5729419" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.36", "product": { "name": "vers:unknown/py-1.34.36", "product_id": "CSAFPID-5729420" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.37", "product": { "name": "vers:unknown/py-1.34.37", "product_id": "CSAFPID-5729421" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.38", "product": { "name": "vers:unknown/py-1.34.38", "product_id": "CSAFPID-5729422" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.39", "product": { "name": "vers:unknown/py-1.34.39", "product_id": "CSAFPID-5729423" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.4", "product": { "name": "vers:unknown/py-1.34.4", "product_id": "CSAFPID-5729424" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.40", "product": { "name": "vers:unknown/py-1.34.40", "product_id": "CSAFPID-5729425" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.41", "product": { "name": "vers:unknown/py-1.34.41", "product_id": "CSAFPID-5729426" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.42", "product": { "name": "vers:unknown/py-1.34.42", "product_id": "CSAFPID-5729427" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.43", "product": { "name": "vers:unknown/py-1.34.43", "product_id": "CSAFPID-5729428" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.5", "product": { "name": "vers:unknown/py-1.34.5", "product_id": "CSAFPID-5729429" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.7", "product": { "name": "vers:unknown/py-1.34.7", "product_id": "CSAFPID-5729430" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.34.8", "product": { "name": "vers:unknown/py-1.34.8", "product_id": "CSAFPID-5729431" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.0", "product": { "name": "vers:unknown/py-1.35.0", "product_id": "CSAFPID-5729432" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.1", "product": { "name": "vers:unknown/py-1.35.1", "product_id": "CSAFPID-5729433" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.3", "product": { "name": "vers:unknown/py-1.35.3", "product_id": "CSAFPID-5729434" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.4", "product": { "name": "vers:unknown/py-1.35.4", "product_id": "CSAFPID-5729435" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.5", "product": { "name": "vers:unknown/py-1.35.5", "product_id": "CSAFPID-5729436" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.6", "product": { "name": "vers:unknown/py-1.35.6", "product_id": "CSAFPID-5729437" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.7", "product": { "name": "vers:unknown/py-1.35.7", "product_id": "CSAFPID-5729438" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.8", "product": { "name": "vers:unknown/py-1.35.8", "product_id": "CSAFPID-5729439" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.35.9", "product": { "name": "vers:unknown/py-1.35.9", "product_id": "CSAFPID-5729440" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.0", "product": { "name": "vers:unknown/py-1.36.0", "product_id": "CSAFPID-5729441" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.1", "product": { "name": "vers:unknown/py-1.36.1", "product_id": "CSAFPID-5729442" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.2", "product": { "name": "vers:unknown/py-1.36.2", "product_id": "CSAFPID-5729443" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.3", "product": { "name": "vers:unknown/py-1.36.3", "product_id": "CSAFPID-5729444" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.6", "product": { "name": "vers:unknown/py-1.36.6", "product_id": "CSAFPID-5729445" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.7", "product": { "name": "vers:unknown/py-1.36.7", "product_id": "CSAFPID-5729446" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.8", "product": { "name": "vers:unknown/py-1.36.8", "product_id": "CSAFPID-5729447" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.36.9", "product": { "name": "vers:unknown/py-1.36.9", "product_id": "CSAFPID-5729448" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.37.0", "product": { "name": "vers:unknown/py-1.37.0", "product_id": "CSAFPID-5729449" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.4.0", "product": { "name": "vers:unknown/py-1.4.0", "product_id": "CSAFPID-5729450" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.5.0", "product": { "name": "vers:unknown/py-1.5.0", "product_id": "CSAFPID-5729451" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.6.0", "product": { "name": "vers:unknown/py-1.6.0", "product_id": "CSAFPID-5729452" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.7.0", "product": { "name": "vers:unknown/py-1.7.0", "product_id": "CSAFPID-5729453" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.8.0", "product": { "name": "vers:unknown/py-1.8.0", "product_id": "CSAFPID-5729454" } }, { "category": "product_version_range", "name": "vers:unknown/py-1.9.0", "product": { "name": "vers:unknown/py-1.9.0", "product_id": "CSAFPID-5729455" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.0.0", "product": { "name": "vers:unknown/ts-1.0.0", "product_id": "CSAFPID-5729456" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.1.0", "product": { "name": "vers:unknown/ts-1.1.0", "product_id": "CSAFPID-5729457" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.2.0", "product": { "name": "vers:unknown/ts-1.2.0", "product_id": "CSAFPID-5729458" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.3.0", "product": { "name": "vers:unknown/ts-1.3.0", "product_id": "CSAFPID-5729459" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.3.1", "product": { "name": "vers:unknown/ts-1.3.1", "product_id": "CSAFPID-5729460" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.4.0", "product": { "name": "vers:unknown/ts-1.4.0", "product_id": "CSAFPID-5729461" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.4.0-beta.1", "product": { "name": "vers:unknown/ts-1.4.0-beta.1", "product_id": "CSAFPID-5729462" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.4.0-beta.3", "product": { "name": "vers:unknown/ts-1.4.0-beta.3", "product_id": "CSAFPID-5729463" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.4.1", "product": { "name": "vers:unknown/ts-1.4.1", "product_id": "CSAFPID-5729464" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.5.0", "product": { "name": "vers:unknown/ts-1.5.0", "product_id": "CSAFPID-5729465" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.6.0", "product": { "name": "vers:unknown/ts-1.6.0", "product_id": "CSAFPID-5729466" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.7.0", "product": { "name": "vers:unknown/ts-1.7.0", "product_id": "CSAFPID-5729467" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.7.1", "product": { "name": "vers:unknown/ts-1.7.1", "product_id": "CSAFPID-5729468" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.8.0", "product": { "name": "vers:unknown/ts-1.8.0", "product_id": "CSAFPID-5729469" } }, { "category": "product_version_range", "name": "vers:unknown/ts-1.9.0", "product": { "name": "vers:unknown/ts-1.9.0", "product_id": "CSAFPID-5729470" } } ], "category": "product_name", "name": "openlit" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=1.36.2|<1.37.1", "product": { "name": "vers:unknown/>=1.36.2|<1.37.1", "product_id": "CSAFPID-5767372", "product_identification_helper": { "cpe": "cpe:2.3:a:openlit:openlit_software_development_kit:*:*:*:*:*:python:*:*" } } } ], "category": "product_name", "name": "openlit_software_development_kit" } ], "category": "vendor", "name": "openlit" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-27941", "cwe": { "id": "CWE-829", "name": "Inclusion of Functionality from Untrusted Control Sphere" }, "notes": [ { "category": "description", "text": "OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-27941" }, { "category": "description", "text": "OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-27941" }, { "category": "description", "text": "OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27941.json?alt=media" }, { "category": "other", "text": "0.00053", "title": "EPSS" }, { "category": "other", "text": "4.0", "title": "NCSC Score" }, { "category": "other", "text": "There is product data available from source Cveprojectv5", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "Exploit code publicly available, There is exploit data available from source Nvd, Is related to CWE-829 (Inclusion of Functionality from Untrusted Control Sphere)", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5723440", "CSAFPID-5729239", "CSAFPID-5729240", "CSAFPID-5729241", "CSAFPID-5729242", "CSAFPID-5729243", "CSAFPID-5729244", "CSAFPID-5729245", "CSAFPID-5729246", "CSAFPID-5729247", "CSAFPID-5729248", "CSAFPID-5729249", "CSAFPID-5729250", "CSAFPID-5729251", "CSAFPID-5729252", "CSAFPID-5729253", "CSAFPID-5729254", "CSAFPID-5729255", "CSAFPID-5729256", "CSAFPID-5729257", "CSAFPID-5729258", "CSAFPID-5729259", "CSAFPID-5729260", "CSAFPID-5729261", "CSAFPID-5729262", "CSAFPID-5729263", "CSAFPID-5729264", "CSAFPID-5729265", "CSAFPID-5729266", "CSAFPID-5729267", "CSAFPID-5729268", "CSAFPID-5729269", "CSAFPID-5729270", "CSAFPID-5729271", "CSAFPID-5729272", "CSAFPID-5729273", "CSAFPID-5729274", "CSAFPID-5729275", "CSAFPID-5729276", "CSAFPID-5729277", "CSAFPID-5729278", "CSAFPID-5729279", "CSAFPID-5729280", "CSAFPID-5729281", "CSAFPID-5729282", "CSAFPID-5729283", "CSAFPID-5729284", "CSAFPID-5729285", "CSAFPID-5729286", "CSAFPID-5729287", "CSAFPID-5729288", "CSAFPID-5729289", "CSAFPID-5729290", "CSAFPID-5729291", "CSAFPID-5729292", "CSAFPID-5729293", "CSAFPID-5729294", "CSAFPID-5729295", "CSAFPID-5729296", "CSAFPID-5729297", "CSAFPID-5729298", "CSAFPID-5729299", "CSAFPID-5729300", "CSAFPID-5729301", "CSAFPID-5729302", "CSAFPID-5729303", "CSAFPID-5729304", "CSAFPID-5729305", "CSAFPID-5729306", "CSAFPID-5729307", "CSAFPID-5729308", "CSAFPID-5729309", "CSAFPID-5729310", "CSAFPID-5729311", "CSAFPID-5729312", "CSAFPID-5729313", "CSAFPID-5729314", "CSAFPID-5729315", "CSAFPID-5729316", "CSAFPID-5729317", "CSAFPID-5729318", "CSAFPID-5729319", "CSAFPID-5729320", "CSAFPID-5729321", "CSAFPID-5729322", "CSAFPID-5729323", "CSAFPID-5729324", "CSAFPID-5729325", "CSAFPID-5729326", "CSAFPID-5729327", "CSAFPID-5729328", "CSAFPID-5729329", "CSAFPID-5729330", "CSAFPID-5729331", "CSAFPID-5729332", "CSAFPID-5729333", "CSAFPID-5729334", "CSAFPID-5729335", "CSAFPID-5729336", "CSAFPID-5729337", "CSAFPID-5729338", "CSAFPID-5729339", "CSAFPID-5729340", "CSAFPID-5729341", "CSAFPID-5729342", "CSAFPID-5729343", "CSAFPID-5729344", "CSAFPID-5729345", "CSAFPID-5729346", "CSAFPID-5729347", "CSAFPID-5729348", "CSAFPID-5729349", "CSAFPID-5729350", "CSAFPID-5729351", "CSAFPID-5729352", "CSAFPID-5729353", "CSAFPID-5729354", "CSAFPID-5729355", "CSAFPID-5729356", "CSAFPID-5729357", "CSAFPID-5729358", "CSAFPID-5729359", "CSAFPID-5729360", "CSAFPID-5729361", "CSAFPID-5729362", "CSAFPID-5729363", "CSAFPID-5729364", "CSAFPID-5729365", "CSAFPID-5729366", "CSAFPID-5729367", "CSAFPID-5729368", "CSAFPID-5729369", "CSAFPID-5729370", "CSAFPID-5729371", "CSAFPID-5729372", "CSAFPID-5729373", "CSAFPID-5729374", "CSAFPID-5729375", "CSAFPID-5729376", "CSAFPID-5729377", "CSAFPID-5729378", "CSAFPID-5729379", "CSAFPID-5729380", "CSAFPID-5729381", "CSAFPID-5729382", "CSAFPID-5729383", "CSAFPID-5729384", "CSAFPID-5729385", "CSAFPID-5729386", "CSAFPID-5729387", "CSAFPID-5729388", "CSAFPID-5729389", "CSAFPID-5729390", "CSAFPID-5729391", "CSAFPID-5729392", "CSAFPID-5729393", "CSAFPID-5729394", "CSAFPID-5729395", "CSAFPID-5729396", "CSAFPID-5729397", "CSAFPID-5729398", "CSAFPID-5729399", "CSAFPID-5729400", "CSAFPID-5729401", "CSAFPID-5729402", "CSAFPID-5729403", "CSAFPID-5729404", "CSAFPID-5729405", "CSAFPID-5729406", "CSAFPID-5729407", "CSAFPID-5729408", "CSAFPID-5729409", "CSAFPID-5729410", "CSAFPID-5729411", "CSAFPID-5729412", "CSAFPID-5729413", "CSAFPID-5729414", "CSAFPID-5729415", "CSAFPID-5729416", "CSAFPID-5729417", "CSAFPID-5729418", "CSAFPID-5729419", "CSAFPID-5729420", "CSAFPID-5729421", "CSAFPID-5729422", "CSAFPID-5729423", "CSAFPID-5729424", "CSAFPID-5729425", "CSAFPID-5729426", "CSAFPID-5729427", "CSAFPID-5729428", "CSAFPID-5729429", "CSAFPID-5729430", "CSAFPID-5729431", "CSAFPID-5729432", "CSAFPID-5729433", "CSAFPID-5729434", "CSAFPID-5729435", "CSAFPID-5729436", "CSAFPID-5729437", "CSAFPID-5729438", "CSAFPID-5729439", "CSAFPID-5729440", "CSAFPID-5729441", "CSAFPID-5729442", "CSAFPID-5729443", "CSAFPID-5729444", "CSAFPID-5729445", "CSAFPID-5729446", "CSAFPID-5729447", "CSAFPID-5729448", "CSAFPID-5729449", "CSAFPID-5729450", "CSAFPID-5729451", "CSAFPID-5729452", "CSAFPID-5729453", "CSAFPID-5729454", "CSAFPID-5729455", "CSAFPID-5729456", "CSAFPID-5729457", "CSAFPID-5729458", "CSAFPID-5729459", "CSAFPID-5729460", "CSAFPID-5729461", "CSAFPID-5729462", "CSAFPID-5729463", "CSAFPID-5729464", "CSAFPID-5729465", "CSAFPID-5729466", "CSAFPID-5729467", "CSAFPID-5729468", "CSAFPID-5729469", "CSAFPID-5729470", "CSAFPID-5767372" ] }, "references": [ { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-27941" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/27xxx/CVE-2026-27941.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27941" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27941" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-27941.json?alt=media" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-27941" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/openlit/openlit/security/advisories/GHSA-9jgv-x8cq-296q" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27941.json" }, { "category": "external", "summary": "Reference - osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27941" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-5723440", "CSAFPID-5729239", "CSAFPID-5729240", "CSAFPID-5729241", "CSAFPID-5729242", "CSAFPID-5729243", "CSAFPID-5729244", "CSAFPID-5729245", "CSAFPID-5729246", "CSAFPID-5729247", "CSAFPID-5729248", "CSAFPID-5729249", "CSAFPID-5729250", "CSAFPID-5729251", "CSAFPID-5729252", "CSAFPID-5729253", "CSAFPID-5729254", "CSAFPID-5729255", "CSAFPID-5729256", "CSAFPID-5729257", "CSAFPID-5729258", "CSAFPID-5729259", "CSAFPID-5729260", "CSAFPID-5729261", "CSAFPID-5729262", "CSAFPID-5729263", "CSAFPID-5729264", "CSAFPID-5729265", "CSAFPID-5729266", "CSAFPID-5729267", "CSAFPID-5729268", "CSAFPID-5729269", "CSAFPID-5729270", "CSAFPID-5729271", "CSAFPID-5729272", "CSAFPID-5729273", "CSAFPID-5729274", "CSAFPID-5729275", "CSAFPID-5729276", "CSAFPID-5729277", "CSAFPID-5729278", "CSAFPID-5729279", "CSAFPID-5729280", "CSAFPID-5729281", "CSAFPID-5729282", "CSAFPID-5729283", "CSAFPID-5729284", "CSAFPID-5729285", "CSAFPID-5729286", "CSAFPID-5729287", "CSAFPID-5729288", "CSAFPID-5729289", "CSAFPID-5729290", "CSAFPID-5729291", "CSAFPID-5729292", "CSAFPID-5729293", "CSAFPID-5729294", "CSAFPID-5729295", "CSAFPID-5729296", "CSAFPID-5729297", "CSAFPID-5729298", "CSAFPID-5729299", "CSAFPID-5729300", "CSAFPID-5729301", "CSAFPID-5729302", "CSAFPID-5729303", "CSAFPID-5729304", "CSAFPID-5729305", "CSAFPID-5729306", "CSAFPID-5729307", "CSAFPID-5729308", "CSAFPID-5729309", "CSAFPID-5729310", "CSAFPID-5729311", "CSAFPID-5729312", "CSAFPID-5729313", "CSAFPID-5729314", "CSAFPID-5729315", "CSAFPID-5729316", "CSAFPID-5729317", "CSAFPID-5729318", "CSAFPID-5729319", "CSAFPID-5729320", "CSAFPID-5729321", "CSAFPID-5729322", "CSAFPID-5729323", "CSAFPID-5729324", "CSAFPID-5729325", "CSAFPID-5729326", "CSAFPID-5729327", "CSAFPID-5729328", "CSAFPID-5729329", "CSAFPID-5729330", "CSAFPID-5729331", "CSAFPID-5729332", "CSAFPID-5729333", "CSAFPID-5729334", "CSAFPID-5729335", "CSAFPID-5729336", "CSAFPID-5729337", "CSAFPID-5729338", "CSAFPID-5729339", "CSAFPID-5729340", "CSAFPID-5729341", "CSAFPID-5729342", "CSAFPID-5729343", "CSAFPID-5729344", "CSAFPID-5729345", "CSAFPID-5729346", "CSAFPID-5729347", "CSAFPID-5729348", "CSAFPID-5729349", "CSAFPID-5729350", "CSAFPID-5729351", "CSAFPID-5729352", "CSAFPID-5729353", "CSAFPID-5729354", "CSAFPID-5729355", "CSAFPID-5729356", "CSAFPID-5729357", "CSAFPID-5729358", "CSAFPID-5729359", "CSAFPID-5729360", "CSAFPID-5729361", "CSAFPID-5729362", "CSAFPID-5729363", "CSAFPID-5729364", "CSAFPID-5729365", "CSAFPID-5729366", "CSAFPID-5729367", "CSAFPID-5729368", "CSAFPID-5729369", "CSAFPID-5729370", "CSAFPID-5729371", "CSAFPID-5729372", "CSAFPID-5729373", "CSAFPID-5729374", "CSAFPID-5729375", "CSAFPID-5729376", "CSAFPID-5729377", "CSAFPID-5729378", "CSAFPID-5729379", "CSAFPID-5729380", "CSAFPID-5729381", "CSAFPID-5729382", "CSAFPID-5729383", "CSAFPID-5729384", "CSAFPID-5729385", "CSAFPID-5729386", "CSAFPID-5729387", "CSAFPID-5729388", "CSAFPID-5729389", "CSAFPID-5729390", "CSAFPID-5729391", "CSAFPID-5729392", "CSAFPID-5729393", "CSAFPID-5729394", "CSAFPID-5729395", "CSAFPID-5729396", "CSAFPID-5729397", "CSAFPID-5729398", "CSAFPID-5729399", "CSAFPID-5729400", "CSAFPID-5729401", "CSAFPID-5729402", "CSAFPID-5729403", "CSAFPID-5729404", "CSAFPID-5729405", "CSAFPID-5729406", "CSAFPID-5729407", "CSAFPID-5729408", "CSAFPID-5729409", "CSAFPID-5729410", "CSAFPID-5729411", "CSAFPID-5729412", "CSAFPID-5729413", "CSAFPID-5729414", "CSAFPID-5729415", "CSAFPID-5729416", "CSAFPID-5729417", "CSAFPID-5729418", "CSAFPID-5729419", "CSAFPID-5729420", "CSAFPID-5729421", "CSAFPID-5729422", "CSAFPID-5729423", "CSAFPID-5729424", "CSAFPID-5729425", "CSAFPID-5729426", "CSAFPID-5729427", "CSAFPID-5729428", "CSAFPID-5729429", "CSAFPID-5729430", "CSAFPID-5729431", "CSAFPID-5729432", "CSAFPID-5729433", "CSAFPID-5729434", "CSAFPID-5729435", "CSAFPID-5729436", "CSAFPID-5729437", "CSAFPID-5729438", "CSAFPID-5729439", "CSAFPID-5729440", "CSAFPID-5729441", "CSAFPID-5729442", "CSAFPID-5729443", "CSAFPID-5729444", "CSAFPID-5729445", "CSAFPID-5729446", "CSAFPID-5729447", "CSAFPID-5729448", "CSAFPID-5729449", "CSAFPID-5729450", "CSAFPID-5729451", "CSAFPID-5729452", "CSAFPID-5729453", "CSAFPID-5729454", "CSAFPID-5729455", "CSAFPID-5729456", "CSAFPID-5729457", "CSAFPID-5729458", "CSAFPID-5729459", "CSAFPID-5729460", "CSAFPID-5729461", "CSAFPID-5729462", "CSAFPID-5729463", "CSAFPID-5729464", "CSAFPID-5729465", "CSAFPID-5729466", "CSAFPID-5729467", "CSAFPID-5729468", "CSAFPID-5729469", "CSAFPID-5729470", "CSAFPID-5767372" ] } ], "title": "CVE-2026-27941" } ] }