security update for python-urwid
Description
CVE-2026-9323 is a security vulnerability in the python-urwid package affecting Red Hat Enterprise Linux versions 8.4 and 8.8. The vulnerability involves predictable session IDs that could lead to remote code execution and information disclosure. Red Hat has issued security advisories and updates to address this issue. The severity is rated as medium, and patches are available for affected versions.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-9323 in python-urwid involves predictable session IDs, which can be exploited to achieve remote code execution and information disclosure. This affects Red Hat Enterprise Linux 8.4 and 8.8 distributions. Red Hat has released security advisories RHSA-2026:57637 and RHSA-2026:57638 providing updated python-urwid packages that fix this issue. The advisories include updated package versions 1.3.1-4.el8_4.1 and 1.3.1-4.el8_8.1 for multiple architectures. The vulnerability is rated with an important security impact by Red Hat, corresponding to a medium severity level.
Potential Impact
Exploitation of this vulnerability could allow an attacker to predict session IDs, potentially leading to remote code execution and unauthorized disclosure of information on affected systems running vulnerable versions of python-urwid. This could compromise system integrity and confidentiality.
Mitigation Recommendations
Red Hat has released official patches for this vulnerability in python-urwid packages for Red Hat Enterprise Linux 8.4 and 8.8. Users should apply the updates as described in the Red Hat advisories RHSA-2026:57637 and RHSA-2026:57638. No additional mitigation actions are required beyond applying these official fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-83x9-8wvq-rrcp
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-9323"]
- Database Specific Severity
- CRITICAL
- Cvss Version
- 4.0
Threat ID: 6a5ba17c44ab8fbf7c789a74
Added to database: 07/18/2026, 15:53:32 UTC
Last enriched: 10/08/2026, 22:56:36 UTC
Last updated: 10/16/2026, 18:48:26 UTC
Views: 159
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.