The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the privileges of the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is false, remain affected, and file flags may still be reset outside of the tree on all platforms.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_85239 advisory.

    * python: python: Arbitrary file deletion via race condition during temporary directory cleanup     (CVE-2026-12345)

    * python: python: Certificate verification bypass via missing server_hostname validation in     SSLContext.wrap_bio() (CVE-2026-19553)

    * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:85239 advisory.

    * python: python: Arbitrary file deletion via race condition during temporary directory cleanup     (CVE-2026-12345)

    * python: python: Certificate verification bypass via missing server_hostname validation in     SSLContext.wrap_bio() (CVE-2026-19553)

    * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85239 advisory.

    * python: python: Arbitrary file deletion via race condition during temporary directory cleanup     (CVE-2026-12345)
      * python: python: Certificate verification bypass via missing server_hostname validation in     SSLContext.wrap_bio() (CVE-2026-19553)
      * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts     (CVE-2026-19445)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-85239 advisory.

    [3.6.8-79.0.1]
    - Add Oracle Linux distribution in platform.py [Orabug: 20812544]

    [3.6.8.openela.0]
    - Add openela to supported dists

    [3.6.8-79]
    - Security fixes for CVE-2026-12345, CVE-2026-19445, CVE-2026-19553     Resolves: RHEL-272935, RHEL-276260, RHEL-274107

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:85239 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * python: python: Arbitrary file deletion via race condition during temporary directory cleanup     (CVE-2026-12345)

    * python: python: Certificate verification bypass via missing server_hostname validation in     SSLContext.wrap_bio() (CVE-2026-19553)

    * python: Use-after-free of a server-side SSLContext when sni_callback switches contexts (CVE-2026-19445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify
    the tree during cleanup can replace a directory with a symbolic link, causing files outside of the
    temporary directory to be deleted or have their permissions and file flags reset, with the privileges of
    the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is
    false, remain affected, and file flags may still be reset outside of the tree on all platforms.
    (CVE-2026-12345)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791359868 advisory.

  - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify     the tree during cleanup can replace a directory with a symbolic link, causing files outside of the     temporary directory to be deleted or have their permissions and file flags reset, with the privileges of     the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is     false, remain affected, and file flags may still be reset outside of the tree on all platforms.
    (CVE-2026-12345)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify     the tree during cleanup can replace a directory with a symbolic link, causing files outside of the     temporary directory to be deleted or have their permissions and file flags reset, with the privileges of     the process performing the cleanup. Note that platforms where shutil.rmtree.avoids_symlink_attacks is     false, remain affected, and file flags may still be reset outside of the tree on all platforms.
    (CVE-2026-12345)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
370338	Rocky Linux 8 [CIQ] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (crlsa-2026_85239)	Nessus	Rocky Linux Local Security Checks	Local	critical
369341	RockyLinux 8 : python3 (RLSA-2026:85239)	Nessus	Rocky Linux Local Security Checks	Local	critical
369095	AlmaLinux 8 : python3 (ALSA-2026:85239)	Nessus	Alma Linux Local Security Checks	Local	critical
368010	Oracle Linux 8 : python3 (ELSA-2026-85239)	Nessus	Oracle Linux Local Security Checks	Local	critical
367385	RHEL 8 : python3 (RHSA-2026:85239)	Nessus	Red Hat Local Security Checks	Local	critical
474667	Chainguard: multiple python-3.14 packages: security update to 3.14.8_git20261014-r0	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
474667	Chainguard: multiple python-3.14 packages: security update to 3.14.8_git20261014-r0	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
363838	AlmaLinux 9.2 [TuxCare] Security Update: python3.11 / python3.11-debug / python3.11-devel / python3.11-idle / etc (ALMALINUX9.2:CLSA-2026:1791359868)	Nessus	Alma Linux Local Security Checks	Local	medium
351229	Linux Distros Unpatched Vulnerability : CVE-2026-12345	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-12345

medium

Tenable Plugins

critical

critical

critical

critical

critical

medium

medium

medium

medium