Copyright © 2012 Red Hat, Inc. All rights reserved.
Important
2026-06-02T18:29:15
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()
7.2
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CWE-502
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may allow arbitrary code execution. Most applications using this function will be doing so with the user's own data, so this is unlikely to affect many applications. Version 3.14.0 patches the issue. If an application does allow attacker controlled files to be loaded, a workaround on older releases would be to sanitize the files before loading.
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.
Red Hat OpenShift AI 2.25
2026-06-10T00:00:00Z
RHSA-2026:24977
rhoai/odh-training-cuda121-torch24-py311-rhel9:1780078807
Red Hat OpenShift AI 2.25
2026-06-10T00:00:00Z
RHSA-2026:24977
rhoai/odh-training-cuda124-torch25-py311-rhel9:1780078840
Red Hat OpenShift AI 2.25
2026-06-10T00:00:00Z
RHSA-2026:24977
rhoai/odh-training-rocm62-torch24-py311-rhel9:1780069179
Red Hat OpenShift AI 2.25
2026-06-10T00:00:00Z
RHSA-2026:24977
rhoai/odh-training-rocm62-torch25-py311-rhel9:1780069181
Exploit Intelligence
Affected
exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Migration Toolkit for Applications 8
Affected
mta/mta-solution-server-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-ocp-rag-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed/lightspeed-service-api-rhel9
OpenShift Lightspeed
Affected
openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
Red Hat AI Inference Server
Affected
rhaii/model-opt-cuda-rhel9
Red Hat AI Inference Server
Affected
rhaiis/model-opt-cuda-rhel9
Red Hat AI Inference Server
Will not fix
rhaiis/vllm-cpu-rhel9
Red Hat AI Inference Server
Affected
rhaiis/vllm-cuda-rhel9
Red Hat AI Inference Server
Will not fix
rhaiis/vllm-neuron-rhel9
Red Hat AI Inference Server
Affected
rhaiis/vllm-rocm-rhel9
Red Hat AI Inference Server
Affected
rhaiis/vllm-spyre-rhel9
Red Hat AI Inference Server
Affected
rhaiis/vllm-tpu-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-cpu-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-cuda-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-gaudi-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-neuron-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-rocm-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-spyre-rhel9
Red Hat AI Inference Server
Affected
rhaii/vllm-tpu-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-24/lightspeed-rhel8
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-25/ee-supported-rhel8
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-25/lightspeed-chatbot-rhel8
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-25/lightspeed-rhel8
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/ansible-dev-tools-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/controller-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/de-supported-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/ee-minimal-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/ee-supported-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/hub-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/lightspeed-chatbot-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/lightspeed-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-26/platform-resource-runner-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/controller-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/de-minimal-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/de-supported-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/ee-minimal-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/ee-supported-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/hub-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/lightspeed-chatbot-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/lightspeed-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
ansible-automation-platform-27/platform-resource-runner-rhel9
Red Hat Ansible Automation Platform 2
Under investigation
automation-controller
Red Hat Ansible Automation Platform 2
Under investigation
python-aiohttp
Red Hat Ansible Automation Platform Ansible Core 2
Under investigation
ansible-automation-platform/ee-minimal-rhel8
Red Hat Ansible Automation Platform Ansible Core 2
Under investigation
ansible-automation-platform/ee-minimal-rhel9
Red Hat Ansible Automation Platform Ansible Core 2
Under investigation
ansible-automation-platform-tech-preview/ee-minimal-rhel8
Red Hat Ansible Automation Platform Ansible Core 2
Under investigation
ansible-automation-platform-tech-preview/ee-minimal-rhel9
Red Hat Discovery 2
Under investigation
discovery/discovery-server-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-aws-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-azure-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-azure-rocm-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-gaudi-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-gcp-cuda-rhel9
Red Hat Enterprise Linux AI (RHEL AI) 3
Affected
rhelai3/bootc-rocm-rhel9
Red Hat Hardened Images
Affected
mariadb11.8
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-automl-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-autorag-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-caikit-nlp-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-caikit-tgis-serving-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-feature-server-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-kserve-agent-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-kserve-autogluon-server-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-kserve-controller-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-kserve-router-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-kserve-storage-initializer-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-llama-stack-core-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-llm-d-kv-cache-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-mlflow-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-ml-pipelines-runtime-generic-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-mlserver-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-model-registry-job-async-upload-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-openvino-model-server-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-ta-lmes-job-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-th06-cpu-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-th06-cuda130-torch210-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-th06-rocm64-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-training-cuda128-torch28-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-training-cuda128-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-training-rocm64-torch28-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-training-rocm64-torch29-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-trustyai-nemo-guardrails-server-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-vllm-cuda-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-vllm-gaudi-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-vllm-rocm-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Affected
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat Satellite 6
Under investigation
python-aiohttp
Red Hat Satellite 6
Under investigation
satellite:el8/python-aiohttp
Red Hat Satellite 6
Under investigation
satellite/iop-insights-engine-rhel9
Red Hat Satellite 6
Under investigation
satellite/iop-vulnerability-engine-rhel9
Red Hat Update Infrastructure 4 for Cloud Providers
Under investigation
python-aiohttp
https://www.cve.org/CVERecord?id=CVE-2026-34993
https://nvd.nist.gov/vuln/detail/CVE-2026-34993
https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8