Red Hat Security Advisory: python3-setuptools security update
Affects Red Hat python3-setuptoolsSource GCVE Database
Not known to be exploited.
Data as of 31 Oct 2026, 20:20 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 1.5% chance of exploitation in 30 days – higher than 75% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 23 Jul 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
Public exploit code: GitHub proofs of concept
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 31 Oct 2026.
What to do
AI-suggested
Red Hat has released an official security update for python3-setuptools in Red Hat Enterprise Linux 7 Extended Lifecycle Support (version 39.2.0-10.el7_9.2) that addresses this vulnerability. Users should apply this update as detailed in the Red Hat advisory and article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor.
Description
A path traversal vulnerability (CVE-2025-47273) was identified in the setuptools PackageIndex component of the python3-setuptools package in Red Hat Enterprise Linux 7 Extended Lifecycle Support. This vulnerability allows an attacker to potentially access files outside the intended directory. Red Hat has issued a security update to address this issue with a moderate severity rating.