Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-k56h-5cpj-5kg1
Vulnerability ID VCID-k56h-5cpj-5kg1
Aliases CVE-2026-25645
GHSA-gc5v-m9x4-r6x2
Summary requests: Requests: Security bypass due to predictable temporary file creation
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-379 Creation of Temporary File in Directory with Insecure Permissions
CWE-377 Insecure Temporary File
System Score Found at
cvssv3 4.7 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25645.json
epss 4e-05 https://api.first.org/data/v1/epss?cve=CVE-2026-25645
cvssv3.1 5.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 4.4 https://github.com/psf/requests
generic_textual MODERATE https://github.com/psf/requests
cvssv3.1 4.4 https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
generic_textual MODERATE https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
ssvc Track https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
cvssv3.1 4.4 https://github.com/psf/requests/releases/tag/v2.33.0
generic_textual MODERATE https://github.com/psf/requests/releases/tag/v2.33.0
ssvc Track https://github.com/psf/requests/releases/tag/v2.33.0
cvssv3.1 4.4 https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
generic_textual MODERATE https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
ssvc Track https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
cvssv3.1 4.4 https://nvd.nist.gov/vuln/detail/CVE-2026-25645
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2026-25645
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25645.json
https://api.first.org/data/v1/epss?cve=CVE-2026-25645
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25645
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/psf/requests
https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
https://github.com/psf/requests/releases/tag/v2.33.0
https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
https://nvd.nist.gov/vuln/detail/CVE-2026-25645
1132071 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132071
2451408 https://bugzilla.redhat.com/show_bug.cgi?id=2451408
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25645.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N Found at https://github.com/psf/requests
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N Found at https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-25T20:09:33Z/ Found at https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N Found at https://github.com/psf/requests/releases/tag/v2.33.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-25T20:09:33Z/ Found at https://github.com/psf/requests/releases/tag/v2.33.0
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N Found at https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-25T20:09:33Z/ Found at https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2026-25645
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.00201
EPSS Score 4e-05
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:41:48.951564+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-25645.json 38.6.0