pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations. This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue has been fixed in version 3.0.2.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f89e555af4 advisory.

    Patch release for security advisory     [CVE-2026-32711](https://github.com/advisories/GHSA-v856-2rf8-9f28). A crafted     DICOMDIR could create a path traversal by setting `ReferencedFileID` to a path     outside the File-set root.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5c971af6c advisory.

    Patch release for security advisory     [CVE-2026-32711](https://github.com/advisories/GHSA-v856-2rf8-9f28). A crafted     DICOMDIR could create a path traversal by setting `ReferencedFileID` to a path     outside the File-set root.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are     vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a     path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not     verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such     as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations.
    This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue     has been fixed in version 3.0.2. (CVE-2026-32711)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
305676	Fedora 42 : python-pydicom (2026-f89e555af4)	Nessus	Fedora Local Security Checks	high
305672	Fedora 43 : python-pydicom (2026-f5c971af6c)	Nessus	Fedora Local Security Checks	high
303276	Linux Distros Unpatched Vulnerability : CVE-2026-32711	Nessus	Misc.	high

Detections

Analytics

CVE-2026-32711

high

Tenable Plugins

high

high

high