Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-27T11:18:49 thrift: Apache Thrift Python bindings: Information disclosure due to improper certificate validation 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-295

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603

A flaw was found in Apache Thrift Python bindings. This vulnerability, stemming from improper validation of certificates with host mismatch, could allow a remote attacker to intercept and access sensitive information. The issue occurs when the Python client fails to adequately verify the server's certificate against its hostname, potentially enabling a man-in-the-middle (MITM) attack and leading to information disclosure.

Moderate: This flaw in Apache Thrift Python bindings could lead to information disclosure due to improper certificate validation, allowing a remote attacker with high attack complexity to intercept sensitive data without requiring user interaction or privileges. While Red Hat Enterprise Linux AI is not affected, OpenShift Container Platform, Red Hat OpenShift Update Service, and Confidential Compute Attestation are impacted where these bindings are used in network communication. Red Hat Hardened Images 2026-08-03T00:00:00Z RHSA-2026:49837 thrift-main-0.24.0-0.1.hum1 Confidential Compute Attestation Not affected openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Enterprise Linux AI (RHEL AI) 3 Not affected thrift Red Hat OpenShift Container Platform 4 Not affected conmon-rs Red Hat OpenShift Container Platform 4 Fix deferred kata-containers Red Hat OpenShift Container Platform 4 Under investigation thrift Red Hat OpenShift Update Service Not affected openshift-update-service/openshift-update-service-rhel8 https://www.cve.org/CVERecord?id=CVE-2026-66053 https://nvd.nist.gov/vuln/detail/CVE-2026-66053 https://lists.apache.org/thread/7v3jhgwfbmhx42424phydlnzb109g8b9 https://lists.apache.org/thread/w4k5dnv1x58knwlhpo9x0or5xh220y65