Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python
    bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version
    0.24.0, which fixes the issue. (CVE-2026-41608)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python     bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version     0.24.0, which fixes the issue. (CVE-2026-41608)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
462250	Echo: thrift: security update to 0.19.0-4+e2	Tenable Cloud Security	Echo Local Security Checks	Local	high
462250	Echo: thrift: security update to 0.19.0-4+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
447403	SCA: security update for thrift (GHSA-6pjx-3pjc-mrj8)	Tenable Cloud Security	SCA Checks	Local	high
447403	SCA: security update for thrift (GHSA-6pjx-3pjc-mrj8)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
330389	Linux Distros Unpatched Vulnerability : CVE-2026-41608	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-41608

high

Tenable Plugins

high

high

high

high

high