Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-06T14:24:15 pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CWE-22

pydantic-settings provides settings management using Pydantic. From 2.12.0 until 2.14.2, NestedSecretsSettingsSource reads secret values from files in a configured secrets_dir. When secrets_nested_subdir=True, a directory entry inside secrets_dir that is a symbolic link pointing outside secrets_dir is followed, so files outside the configured directory are read into settings values. The same code path bypasses the documented secrets_dir_max_size protection. An attacker or lower-privileged component able to influence entries in the configured secrets directory (for example, a writable or shared secrets mount) can turn this into an unintended local file read into settings and can defeat the advertised loading-size cap. This vulnerability is fixed in 2.14.2.

A flaw was found in the `pydantic-settings` component. When configured to handle nested secrets, this vulnerability allows an attacker to read sensitive files from outside the designated secrets directory. By placing a specially crafted symbolic link within the secrets directory, an attacker can trick the system into accessing unauthorized files. This issue also bypasses a safeguard designed to limit the size of loaded secrets, potentially leading to unexpected resource usage. This vulnerability requires an attacker to have the ability to modify entries within the secrets directory.

Moderate: This flaw in `pydantic-settings` allows for local file disclosure and bypass of size restrictions when `NestedSecretsSettingsSource` is used with `secrets_nested_subdir=True` and an attacker can influence entries in the configured `secrets_dir`. This is due to inconsistent directory traversal implementations that follow symbolic links outside the intended directory, enabling unauthorized reading of local files. To mitigate this issue, ensure that the `secrets_dir` used by `pydantic-settings` with `NestedSecretsSettingsSource` is exclusively controlled by the application, preventing any unauthorized modifications or symlink placements. Alternatively, disable the `secrets_nested_subdir=True` option if nested secret subdirectories are not essential for your application's functionality. Exploit Intelligence Not affected exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Lightspeed Core Not affected lightspeed-core/lightspeed-stack-rhel9 Migration Toolkit for Applications 8 Fix deferred mta/mta-solution-server-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 OpenShift Lightspeed Fix deferred openshift-lightspeed/lightspeed-service-api-rhel9 Red Hat AI Inference Server Fix deferred rhaii/model-opt-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaiis/vllm-tpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cpu-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-cuda-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-neuron-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-rocm-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-spyre-rhel9 Red Hat AI Inference Server Fix deferred rhaii/vllm-tpu-rhel9 Red Hat Ansible Automation Platform 2 Out of support scope ansible-automation-platform-25/lightspeed-chatbot-rhel8 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-26/mcp-tools-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/lightspeed-chatbot-rhel9 Red Hat Ansible Automation Platform 2 Fix deferred ansible-automation-platform-27/mcp-tools-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-aws-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-azure-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-azure-rocm-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-gaudi-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-gcp-cuda-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Fix deferred rhelai3/bootc-rocm-rhel9 Red Hat Enterprise Linux command line assistant Not affected rhel-cla/rhel-knowledge-bridge-rhel10 Red Hat Hardened Images Not affected jaeger Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-caikit-nlp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-caikit-tgis-serving-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-feature-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-agent-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-controller-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-router-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-kserve-storage-initializer-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llama-stack-core-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-llm-d-kv-cache-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mlserver-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-ta-lmes-job-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-trustyai-nemo-guardrails-server-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-vllm-gaudi-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 Red Hat OpenShift Virtualization 4 Fix deferred container-native-virtualization/ocp-virt-validation-checkup-rhel9 Red Hat Satellite 6 Not affected satellite/foreman-mcp-server-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-58203 https://nvd.nist.gov/vuln/detail/CVE-2026-58203 https://github.com/pydantic/pydantic-settings/security/advisories/GHSA-4xgf-cpjx-pc3j