Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can allow a NUL: special-device path because safe_join checks the Windows device name without first removing an empty NTFS ADS marker. The trigger is that an application runs on Windows with NTFS and serves a user-specified path ending in a special device name such as NUL:. The attack mechanism is that a requested path ends in a Windows special device name with an empty ADS marker. The impact is that the special device opens successfully and the file read hangs indefinitely. This issue is fixed in version 3.1.9.

The version of the Werkzeug Python package installed on the remote Windows host is prior to 3.1.9. It is, therefore, affected by a denial of service vulnerability:

  - Werkzeug is a WSGI web application library. Prior to 3.1.9, the safe_join function used by send_from_directory can     allow a NUL: special-device path because safe_join checks the Windows device name without first removing an empty     NTFS ADS marker. An application that runs on Windows with NTFS and serves a user-specified path ending in a special     device name such as NUL: can cause the special device to open successfully and the file read to hang indefinitely.
    (CVE-2026-102598)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by
    send_from_directory can allow a NUL: special-device path because safe_join checks the Windows device name
    without first removing an empty NTFS ADS marker. The trigger is that an application runs on Windows with
    NTFS and serves a user-specified path ending in a special device name such as NUL:. The attack mechanism
    is that a requested path ends in a Windows special device name with an empty ADS marker. The impact is
    that the special device opens successfully and the file read hangs indefinitely. This issue is fixed in
    version 3.1.9. (CVE-2026-102598)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Werkzeug is a comprehensive WSGI web application library. Prior to 3.1.9, the safe_join function used by     send_from_directory can allow a NUL: special-device path because safe_join checks the Windows device name     without first removing an empty NTFS ADS marker. The trigger is that an application runs on Windows with     NTFS and serves a user-specified path ending in a special device name such as NUL:. The attack mechanism     is that a requested path ends in a Windows special device name with an empty ADS marker. The impact is     that the special device opens successfully and the file read hangs indefinitely. This issue is fixed in     version 3.1.9. (CVE-2026-102598)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
371389	Python Library Werkzeug < 3.1.9 DoS (CVE-2026-102598)	Nessus	Windows	Local	medium
473575	Echo: werkzeug: security update to 3.1.9	Tenable Cloud Security	Echo Local Security Checks	Local	medium
473575	Echo: werkzeug: security update to 3.1.9	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
472948	SCA: security update for Werkzeug (GHSA-g6x2-hccm-hh4m)	Tenable Cloud Security	SCA Checks	Local	medium
472948	SCA: security update for Werkzeug (GHSA-g6x2-hccm-hh4m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
358385	Linux Distros Unpatched Vulnerability : CVE-2026-102598	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-102598

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium