pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations. This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue has been fixed in version 3.0.2.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-9eecdef4e0 advisory.

    Patch release for security advisory     [CVE-2026-32711](https://github.com/advisories/GHSA-v856-2rf8-9f28). A crafted     DICOMDIR could create a path traversal by setting `ReferencedFileID` to a path     outside the File-set root.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f89e555af4 advisory.

    Patch release for security advisory     [CVE-2026-32711](https://github.com/advisories/GHSA-v856-2rf8-9f28). A crafted     DICOMDIR could create a path traversal by setting `ReferencedFileID` to a path     outside the File-set root.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f5c971af6c advisory.

    Patch release for security advisory     [CVE-2026-32711](https://github.com/advisories/GHSA-v856-2rf8-9f28). A crafted     DICOMDIR could create a path traversal by setting `ReferencedFileID` to a path     outside the File-set root.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are
    vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a
    path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not
    verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such
    as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations.
    This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue
    has been fixed in version 3.0.2. (CVE-2026-32711)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pydicom is a pure Python package for working with DICOM files. Versions 2.0.0-rc.1 through 3.0.1 are     vulnerable to Path Traversal through a maliciously crafted DICOMDIR ReferencedFileID when it is set to a     path outside the File-set root. pydicom resolves the path only to confirm that it exists, but does not     verify that the resolved path remains under the File-set root. Subsequent public FileSet operations such     as copy(), write(), and remove()+write(use_existing=True) use that unchecked path in file I/O operations.
    This allows arbitrary file read/copy and, in some flows, move/delete outside the File-set root. This issue     has been fixed in version 3.0.2. (CVE-2026-32711)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
310689	Fedora 44 : python-pydicom (2026-9eecdef4e0)	Nessus	Fedora Local Security Checks	high
305676	Fedora 42 : python-pydicom (2026-f89e555af4)	Nessus	Fedora Local Security Checks	high
305672	Fedora 43 : python-pydicom (2026-f5c971af6c)	Nessus	Fedora Local Security Checks	high
439132	Alpine: multiple py3-pydicom packages: security update to 3.0.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
439132	Alpine: multiple py3-pydicom packages: security update to 3.0.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
303276	Linux Distros Unpatched Vulnerability : CVE-2026-32711	Nessus	Misc.	high
439060	SCA: security update for pydicom (GHSA-v856-2rf8-9f28)	Tenable Cloud Security	SCA Checks	high
439060	SCA: security update for pydicom (GHSA-v856-2rf8-9f28)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2026-32711

high

Tenable Plugins

high

high

high

high

high

high

high

high