CVE-2026-13221 is a vulnerability in Perl involving incorrect regular expression processing when handling large regular expressions. This flaw could cause improper behavior in Perl scripts that utilize complex regex patterns. Red Hat has released updated RPM packages for Perl and related modules to address this issue. The advisory covers numerous Perl versions across Red Hat Hardened Images and Red Hat Enterprise Linux distributions. There is no indication of active exploitation in the wild. The vulnerability is categorized with CWE-625 (Improper Control of a Resource Through its Lifetime) and CWE-125 (Out-of-bounds Read).

The vulnerability may allow attackers or malicious scripts to cause unexpected behavior or potentially crash Perl processes by exploiting the incorrect handling of large regular expressions. This could affect system utilities or web applications relying on Perl for processing. However, no known active exploits have been reported, and the impact is considered medium severity.

Red Hat has released official security updates that fix this vulnerability. Users should apply the updated Perl packages as provided in the Red Hat Security Advisory RHSA-2026:39997. Applying these updates will mitigate the vulnerability. There are no indications that additional mitigations are required beyond installing the official patches.