CVE-2026-103263

HIGH 8.2

Published 2026-10-01 · Last modified 2026-10-01

Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays within it. When a symlink pointing outside the static directory exists inside it, unauthenticated attackers can request it to read files such as configuration files, private keys, and application secrets accessible to the process user.

ELEVATED IMPACT

Severe if exploited (CVSS 8.2), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

0.5%chance of exploitation in 30 days · 44th percentile

○ In CISA KEV ○ Catalogued PoC

Impact if exploited

8.2CVSS 4.0 · HIGH

ConfidentialityHigh
IntegrityNone
AvailabilityNone

What an attacker needs

✓Access: Reachable over the network — no local access needed
✓Privileges: No account or privileges required
✓User interaction: No user interaction needed
✓Complexity: No special conditions — reliably repeatable
⚠Requirements: Specific conditions must be present

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked daily for recent CVEs, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot: 2026-10-26T13:52:32.101Z

Affected

Vendors Tornadoweb

Products Tornado

Weakness (CWE)

CWE-59: Improper Link Resolution Before File Access ('Link Following')

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

tornado PyPI

pkg:pypi/tornado
ECOSYSTEM range
- All earlier versions (introduced 0)
- Fixed boundary (excluded): 6.5.9
84 explicitly listed affected versions
0.2, 1.0, 1.1, 1.1.1, 1.2, 1.2.1, 2.0, 2.1, 2.1.1, 2.2, 2.2.1, 2.3, 2.4, 2.4.1, 3.0, 3.0.1, 3.0.2, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 4.0, 4.0.1, 4.0.2, 4.1, 4.1b2, 4.2, 4.2.1, 4.2b1, 4.3, 4.3b1, 4.3b2, 4.4, 4.4.1, 4.4.2, 4.4.3, 4.4b1, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5b1, 4.5b2, 5.0, 5.0.1, 5.0.2, 5.0a1, 5.0b1, 5.1, 5.1.1, 5.1b1, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0a1, 6.0b1, 6.1, 6.1b1, 6.1b2, 6.2, 6.2b1, 6.2b2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3b1, 6.4, 6.4.1, 6.4.2, 6.4b1, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5b1
Additional upstream package constraints
```
{
  "database": {
    "last_known_affected_version_range": "<= 6.5.8",
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/09/GHSA-c2m8-h5v5-343r/GHSA-c2m8-h5v5-343r.json"
  }
}
```
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z

Vendor product assessments

Showing 32 of 71 vendor product statements; 39 omitted. Read the full vendor advisory.

lightspeed-core/lightspeed-stack-rhel9 as a component of Lightspeed Core · known affected

Vendor assessment for this product only.

pkg:oci/lightspeed-stack-rhel9@sha256:4094c9b5601983497b2dac5f0e6b3e1cb8e6094eaab30f05d0a7a535a49c179c?repository_url=registry.redhat.io/lightspeed-core/lightspeed-stack-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
lightspeed-core/rag-tool-cuda-12.9-rhel9 as a component of Lightspeed Core · known affected

Vendor assessment for this product only.

pkg:oci/rag-tool-cuda-12.9-rhel9@sha256:dc6aadcf5fe3b7e3dfe7fe00e096910880b009a8c707315c5c9612f7ee195c8f?repository_url=registry.redhat.io/lightspeed-core/rag-tool-cuda-12.9-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2 · known affected

Vendor assessment for this product only.

pkg:oci/lightspeed-chatbot-rhel9@sha256:23b5653f7193bc6d31e62006eb26a443d082a956f5de30a296cf016acead2307?repository_url=registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
python-tornado.src as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/python-tornado?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhel10/keylime-registrar as a component of Red Hat Enterprise Linux 10 · known affected

Vendor assessment for this product only.

pkg:oci/keylime-registrar@sha256:0cc4de8f3228a639843a6e130e5c4000894aa52f04c4fd533b3d34dbb8faa42a?repository_url=registry.redhat.io/rhel10/keylime-registrar
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
pcs as a component of Red Hat Enterprise Linux 8 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/pcs
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
python-tornado.src as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/python-tornado?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhel9/keylime-registrar as a component of Red Hat Enterprise Linux 9 · known affected

Vendor assessment for this product only.

pkg:oci/keylime-registrar@sha256:53335f45dc9373e60009692ccf4d5c0a1b28ded5321172e1d5ec59daf551bb0f?repository_url=registry.redhat.io/rhel9/keylime-registrar
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected

Vendor assessment for this product only.

pkg:oci/bootc-cuda-rhel9@sha256:b45f3bc25a7d3c9f3bfdc1de3be6db59f6c3109f62326d74fae14e832a797981?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3 · known affected

Vendor assessment for this product only.

pkg:oci/bootc-rocm-rhel9@sha256:38ce057f97034bbb8eaea574d41cc7eebaeaa9265a4cdd966476dd3fac129c3c?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-llama-stack-core-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-llama-stack-core-rhel9@sha256:41ab98e2c288953420078c9b77b8ed2b3dd7c1d2a233fbd8e41a6d89daf67b20?repository_url=quay.io/rhoai/odh-llama-stack-core-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-pipeline-runtime-minimal-cpu-py312-rhel9@sha256:b65cee70b3abfa45f0e8ed4763f5c55fb48b75410184065b95b429b2b0a4717f?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:22e6e780ac865b8b30089d1a2a9dcd864191f9c46c8822f2df6002a2a10694a8?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:b193935feddd12ff17ebaf9e5d8341064709fc8315dce5f701f07a836857ed81?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256:0897d02d0bb8251b46b5f5cc038269d3a8f384ded683e99d8832e79dacc5dde3?repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-th06-cuda130-torch210-py312-rhel9@sha256:7f4c4a15b24a0a538de526f305286262bf9784fe7695efae0db3519735deaba4?repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-th06-rocm64-torch291-py312-rhel9@sha256:af1c11918041456c3c17a9477b153ac2831d5de8b6706a5bf56183a188938446?repository_url=registry.redhat.io/rhoai/odh-th06-rocm64-torch291-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:206018cabeb3389fcfb554cb1850c82e509483a2f98bf963d82031303adaaee5?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256:7f754ac3b52ec1667609acc3bdfbc1f3a4903d5bc2faac2bee026dd6b472728b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:f476e56ad00faaad5f2e26010f633233db2d4b299d7c5281e2f4ac46949b531b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:0708626cd3b96dfb6a7bef4085872dc131b64340112c40f7c70e7139882e5412?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected

Vendor assessment for this product only.

pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:90da115e64c80fbf57802442848ff8eee18d8c38e6e30edfdb374bb94dd84735?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
python-flit.src as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/[email protected]?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
python-tornado.src as a component of Red Hat OpenShift Container Platform 4 · known affected

Vendor assessment for this product only.

pkg:rpm/redhat/python-tornado?arch=src
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Fix deferred
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel8/openstack-cinder-volume as a component of Red Hat OpenStack Platform 16.2 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-cinder-volume@sha256:108d3a26be8132c496bb11af28f0c065fd2c903d72ab3c35505d9e08fb6be12f?repository_url=registry.redhat.io/rhosp-rhel8/openstack-cinder-volume
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel8/openstack-mariadb as a component of Red Hat OpenStack Platform 16.2 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-mariadb@sha256:907adbb571120fb91473d982a117ee61fa54ed5c2c309e171eb55612b3ae8f46?repository_url=registry.redhat.io/rhosp-rhel8/openstack-mariadb
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel8/openstack-rabbitmq as a component of Red Hat OpenStack Platform 16.2 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-rabbitmq@sha256:950955f4f3aad6f07d3984592ca240c5f14912a5b1db629ed62bcfd20180442d?repository_url=registry.redhat.io/rhosp-rhel8/openstack-rabbitmq
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel9/openstack-cinder-backup as a component of Red Hat OpenStack Platform 17.1 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-cinder-backup@sha256:a075f74f2e739bb99efe1f14b7f2e3d2aca96c0c139f180f0ef08cbc314c6a3a?repository_url=registry.redhat.io/rhosp-rhel9/openstack-cinder-backup
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel9/openstack-haproxy as a component of Red Hat OpenStack Platform 17.1 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-haproxy@sha256:f8e6031167299543d3dc6144b7203b2726394c1a00ec59de329de38f670da9c7?repository_url=registry.redhat.io/rhosp-rhel9/openstack-haproxy
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel9/openstack-ovn-northd as a component of Red Hat OpenStack Platform 17.1 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-ovn-northd@sha256:2514c1d914c1bae9b00eb2351aa460bc1cc4ed19e15ca00604a148ec9df37fa4?repository_url=registry.redhat.io/rhosp-rhel9/openstack-ovn-northd
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
rhosp-rhel9/openstack-redis as a component of Red Hat OpenStack Platform 17.1 · known affected

Vendor assessment for this product only.

pkg:oci/openstack-redis@sha256:8096c9e75e718782eaf27f1c8375af14a13446245c2cc4ab9b5a59e4cf8f46fc?repository_url=registry.redhat.io/rhosp-rhel9/openstack-redis
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- no fix planned: Out of support scope
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00

All CVSS metrics

HIGH 8.2 v4.0 · CNA Primary
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
MEDIUM 5.9 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
HIGH 8.2 v4.0 · NVD Secondary
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
MEDIUM 5.9 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

References

Exploit-tagged references (not proof of a PoC)

https://github.com/tornadoweb/tornado/security/advisories/GHSA-c2m8-h5v5-343r vendor-advisoryexploitWEBvendor-referenceCVE record · VulnCheck · Updated 2026-10-01T10:42:05.609Z
CVE record · CISA-ADP · Updated 2026-10-01T19:29:47.547Z
NVD · CVE-2026-103263 · Updated 2026-10-01T20:17:23.097
GitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00

Patches & mitigations

https://github.com/tornadoweb/tornado/commit/437ab5f76565403b3403438d2e555d11f8128d32 patchWEBvendor-referenceCVE record · VulnCheck · Updated 2026-10-01T10:42:05.609Z
NVD · CVE-2026-103263 · Updated 2026-10-01T20:17:23.097
GitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00

Advisories

https://www.vulncheck.com/advisories/tornado-before-6.5.9-staticfilehandler-path-traversal-via-symlink third-party-advisoryvendor-referenceCVE record · VulnCheck · Updated 2026-10-01T10:42:05.609Z
NVD · CVE-2026-103263 · Updated 2026-10-01T20:17:23.097
Red Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
https://osv.dev/vulnerability/GHSA-c2m8-h5v5-343r ADVISORYGitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-103263.json vendor-advisoryRed Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-90657 ADVISORYEUVD · EUVD-2026-90657

Technical & other

https://github.com/tornadoweb/tornado/pull/3719 WEBGitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
https://github.com/tornadoweb/tornado/commit/f9f50b8bab265a2abf9f2415a3d2da6264a5450b WEBGitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
https://github.com/tornadoweb/tornado PACKAGEGitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
https://github.com/tornadoweb/tornado/releases/tag/v6.5.9 WEBGitHub Advisory Database · GHSA-c2m8-h5v5-343r
GitHub Advisory Database · GHSA-c2m8-h5v5-343r · Updated 2026-10-02T03:56:10.964622908Z
https://access.redhat.com/security/cve/CVE-2026-103263 vendor-referenceRed Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
https://bugzilla.redhat.com/show_bug.cgi?id=2544519 vendor-referenceRed Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
https://www.cve.org/CVERecord?id=CVE-2026-103263 vendor-referenceRed Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00
https://nvd.nist.gov/vuln/detail/CVE-2026-103263 vendor-referenceRed Hat · CVE-2026-103263 · Updated 2026-10-15T23:31:54+00:00

Sources: NVD · CVE.org · EPSS