Red Hat Security Advisory: python-setuptools security update
Affects Red Hat python-setuptoolsSource GCVE Database
Not known to be exploited.
Data as of 31 Oct 2026, 20:20 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 1.5% chance of exploitation in 30 days – higher than 75% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 21 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Public exploit code: GitHub proofs of concept
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 31 Oct 2026.
What to do
AI-suggested
Red Hat has released an updated python-setuptools package (version 39.2.0-5.el8_2.2) that fixes the path traversal vulnerability. Users of Red Hat Enterprise Linux 8.2 should apply this security update promptly by following the instructions in the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated.
Description
A path traversal vulnerability (CVE-2025-47273) was identified in the setuptools PackageIndex component of the python-setuptools package used in Red Hat Enterprise Linux 8.2. This vulnerability could allow unauthorized access to files outside the intended directory. Red Hat has issued a security update to address this issue with a moderate severity rating.