CVE-2026-4519

Published: Mar 20, 2026Modified: Jul 15, 2026

7.0

Vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: CNA (Secondary)

Description

The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open().

Affected (9)

Products: Python: Python

Python

1 product

Python

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Python Python	Before 3.13.13
Python Python	From 3.14.0 to 3.14.4
Python Python	Version 3.15.0 alpha1
Python Python	Version 3.15.0 alpha2
Python Python	Version 3.15.0 alpha3
Python Python	Version 3.15.0 alpha4
Python Python	Version 3.15.0 alpha5
Python Python	Version 3.15.0 alpha6
Python Python	Version 3.15.0 alpha7

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.

References (71)

https://github.com/python/cpython/commit/3681d47a440865aead912a054d4599087b4270dd

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/43fe06b96f6a6cf5cfd5bdab20b8649374956866

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/591ed890270c5697b013bf637029fb3e6cd2d73e

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/594b5a05dc9913880ac92eded440defbf32a28d1

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/82a24a4442312bdcfc4c799885e8b3e00990f02b

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/89bfb8e5ed3c7caa241028f1a4eac5f6275a46a4

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/9669a912a0e329c094e992204d6bdb8787024d76

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/96fc5048605863c7b6fd6289643feb0e97edd96c

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/ad4d5ba32af4d80b0dfa2ba9d8203bfb219e60a5

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/cbba6119391112aba9c5aebf7b94aea447922c48

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/cc023511238ad93ecc8796157c6f9139a2bb2932

Source: cna@python.org

Patch

https://github.com/python/cpython/commit/ceac1efc66516ac387eef2c9a0ce671895b44f03

Source: cna@python.org

Patch

https://github.com/python/cpython/issues/143930

Source: cna@python.org

Issue TrackingPatch

https://github.com/python/cpython/pull/143931

Source: cna@python.org

Issue TrackingPatch

https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/

Source: cna@python.org

Vendor Advisory

http://www.openwall.com/lists/oss-security/2026/03/20/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2026:10065