CVE-2026-119194 is a high-severity vulnerability in the pyasn1 library used by the s3ql product, affecting versions >=3.1 <3.8.1 and >=6.0.0. It causes quadratic CPU usage when decoding attacker-controlled BER, CER, or DER data without an ASN.1 schema, leading to potential denial of service by exhausting CPU resources. The issue arises from inefficient handling of tag sets during schemaless decoding. A fix is available in version 3.8.1.