{"schema":"vulnpedia.research/1","cve":"CVE-2026-109527","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-fmmv-w9g8-j3gc","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-fmmv-w9g8-j3gc"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-fmmv-w9g8-j3gc"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/security/advisories/GHSA-fmmv-w9g8-j3gc"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/03aaebd3aadb2567878dd811cb1f141454e8a080","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/commit/03aaebd3aadb2567878dd811cb1f141454e8a080"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/commit/03aaebd3aadb2567878dd811cb1f141454e8a080"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/commit/03aaebd3aadb2567878dd811cb1f141454e8a080"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/4dc224fab201bdef2fd5a065976b7ca31420187c","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/commit/4dc224fab201bdef2fd5a065976b7ca31420187c"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/commit/4dc224fab201bdef2fd5a065976b7ca31420187c"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/commit/4dc224fab201bdef2fd5a065976b7ca31420187c"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/commit/57394b0548d1e2dc2dce8d67d84985769df3b8bb"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/commit/5f0b6af9f2b0aad3be3ba5cbfe80a9e4ea32e189","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/commit/5f0b6af9f2b0aad3be3ba5cbfe80a9e4ea32e189"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/commit/5f0b6af9f2b0aad3be3ba5cbfe80a9e4ea32e189"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/commit/5f0b6af9f2b0aad3be3ba5cbfe80a9e4ea32e189"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.1","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.1"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.1"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v1.29.1"}]},{"url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.0","tags":["x_refsource_MISC","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T17:52:35.943Z","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.0"},{"source":"nvd","sourceId":"CVE-2026-109527","modified":"2026-10-20T02:17:08.867","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.0"},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://github.com/modelcontextprotocol/python-sdk/releases/tag/v2.1.0"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109527","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-109527"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552745","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552745"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109527","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-109527"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109527","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109527"}]},{"source":"euvd","sourceId":"EUVD-2026-101514","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101514","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101514","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101514"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"ansible_automation_orchestrator_2026:ansible-automation-platform/automation-orchestrator-backend-rhel9","product":"ansible-automation-platform/automation-orchestrator-backend-rhel9 as a component of Ansible Automation Orchestrator 2026","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/automation-orchestrator-backend-rhel9@sha256:93abb3e4ab9571eb09b2de296321d12fdb38d2fa3c32c13cd304ab0db062e591?repository_url=registry.redhat.io/ansible-automation-platform/automation-orchestrator-backend-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"lightspeed_core:lightspeed-core/lightspeed-stack-rhel9","product":"lightspeed-core/lightspeed-stack-rhel9 as a component of Lightspeed Core","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/lightspeed-stack-rhel9@sha256:c8b39c58ade51ce26698f5d3c8d302e2e039f05ff14e014b17da2cba0f8c8068?repository_url=registry.redhat.io/lightspeed-core/lightspeed-stack-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"lightspeed_core:lightspeed-core/rag-tool-cpu-rhel9","product":"lightspeed-core/rag-tool-cpu-rhel9 as a component of Lightspeed Core","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/rag-tool-cpu-rhel9@sha256:ec8e42910dd3a7109d90bf77bb47e198a1580875117dc4b5365b5a85d2d8325c?repository_url=registry.redhat.io/lightspeed-core/rag-tool-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"migration_toolkit_for_applications_8:mta/mta-solution-server-rhel9","product":"mta/mta-solution-server-rhel9 as a component of Migration Toolkit for Applications 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/mta-solution-server-rhel9@sha256:ee4dbe222bd778ef272ddf3e59dac0844289cc719cd87dea1e24df74f344e097?repository_url=registry.redhat.io/mta/mta-solution-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"openshift_lightspeed:openshift-lightspeed/lightspeed-agentic-sandbox-rhel9","product":"openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 as a component of OpenShift Lightspeed","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/lightspeed-agentic-sandbox-rhel9@sha256:d40dff970b3c17d3e0edb23b09da9ae08bac9d3eb81887eae358e041e1923b54?repository_url=registry.redhat.io/openshift-lightspeed/lightspeed-agentic-sandbox-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:1079c9afecdbc33f4790792f0d712dbf7523790a92dcfbe8fb5cf4c2d282fc5b?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:1a30359d6ca5d0891e403b9b0a23c0ae1ad6e30a2429b9b42e246b874fe8859a?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:0c2ac747d67dc0e80162ff05867dd702e474b2217659f19f28b8e3a0c03a942a?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-26/mcp-tools-rhel9","product":"ansible-automation-platform-26/mcp-tools-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/mcp-tools-rhel9@sha256:0dcdca84ec4a9430360a262126095e1a06646137d96806bde5cc226733ffbca3?repository_url=registry.redhat.io/ansible-automation-platform-26/mcp-tools-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ansible_automation_platform_2:ansible-automation-platform-27/lightspeed-chatbot-rhel9","product":"ansible-automation-platform-27/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/lightspeed-chatbot-rhel9@sha256:90ab0d048385b72c760d57c2eb194dfbc0224176e3bd8fc0dccb31eebf6fe8c5?repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9@sha256:06b1e9b7df858121b6f339a5e78de93307be96c191a1c3e6df50cfeffaf9df15?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9@sha256:698d9e34aaf479d0149ea75b841dacbe0117ba2e3718a7088ac98ea6b081792e?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-rocm-rhel9@sha256:8fe5203e86917e5f829bd64b831cad31536d23a213b4bfe31e652577ad0faf2e?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhai-early-access/docling-serve-cuda-rhel9","product":"rhai-early-access/docling-serve-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/docling-serve-cuda-rhel9@sha256:d4393882dd9adc9ee6fd03265bb20d90944906a4fa6b37db5b0a47df36ebac75?repository_url=registry.redhat.io/rhai-early-access/docling-serve-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","product":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-feature-server-rhel9@sha256:c5dd868cd66e7911969f60658d31b3714ed42f0e81b9512f89991a412bcb0fa9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-controller-rhel9","product":"rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-controller-rhel9@sha256:c15f0cdab6447446384bbd911bd48368839d0eb20c02e287236e6c905bf34cba?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-router-rhel9@sha256:0e46fd236b218fb33ffe90592f67b50d2f286356f23ecc2c4ec5ae67fa64b57a?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llama-stack-core-rhel9","product":"rhoai/odh-llama-stack-core-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-llama-stack-core-rhel9@sha256:e60cc260f4d1434443572e4ca096b9c1daccd0f046803d716f0521856e837151?repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9","product":"rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-llm-d-kv-cache-rhel9@sha256:cb5eedeefd2578cd9bd8637250bbe299c84539f57b4ead75d630ed9f833a6ef2?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","product":"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:63d2a0d4195c108c2957445ca81e176b8af8e1246205a0c9d1f56d5884aacd29?repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_satellite_6:satellite/foreman-mcp-server-rhel9","product":"satellite/foreman-mcp-server-rhel9 as a component of Red Hat Satellite 6","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/foreman-mcp-server-rhel9@sha256:a2a11b050f7e0b7ea0ebf07d159eef351b3d8ef44c5d5b166b9975e9e513074f?repository_url=registry.redhat.io/satellite/foreman-mcp-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-cpu-rhel9@sha256:fb7791bbfea99e9f81529fe8cc1e7c834ca470585c27590e3d0a6834167cd436?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","product":"rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-rocm-rhel9","product":"rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-rocm-rhel9@sha256:37b64a8df90756aae0ee96d2f07765adbce5ed5beb2414ac3845806ad2219cfc?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-openvino-model-server-rhel9","product":"rhoai/odh-openvino-model-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:oci/odh-openvino-model-server-rhel9@sha256:725ffc572dcbb3a515b9dbd3336c1c663f025aacc5f0ebe2f3a4836765d45055?repository_url=registry.redhat.io/rhoai/odh-openvino-model-server-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]},{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109527","modified":"2026-10-20T19:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109527.json"}]}],"vendorCoverage":{"total":46,"shown":32,"omitted":14,"source":"redhat"}}