Red Hat issued a security advisory (RHSA-2026:48788) for Red Hat Hardened Images RPMs to address CVE-2026-13346, a vulnerability in python-pip packages. The update includes python-pip-wheel-26.2-0.1.hum1, python3-pip-26.2-0.1.hum1, and python-pip-26.2-0.1.hum1 source RPMs. The vulnerability corresponds to CWE-22, indicating a path traversal issue. The advisory does not provide explicit affected version ranges or detailed exploitation information. No known exploits in the wild have been reported. The update is available from Red Hat's public repositories.

The vulnerability CVE-2026-13346 affects python-pip packages in Red Hat Hardened Images and is related to a path traversal weakness (CWE-22). Exploitation could potentially allow unauthorized file system access or manipulation. However, no known exploits in the wild have been reported, and the severity is rated medium by Red Hat. The impact is limited to affected python-pip RPMs within Red Hat Hardened Images.

Red Hat has released updated RPM packages (python-pip-wheel-26.2-0.1.hum1, python3-pip-26.2-0.1.hum1, python-pip-26.2-0.1.hum1.src) that address CVE-2026-13346. Users of Red Hat Hardened Images should apply these updates as provided by Red Hat to remediate the vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated by Red Hat.