Vulnerability details
CVE-2026-32597
Red Hat OpenShift LightspeedRed Hat AI Inference ServerRed Hat Ansible Automation Platform 2Red Hat OpenShift AIRed Hat Satellite 6Red Hat Trusted Artifact Signer
PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
CVSS 3.1
7.5High
Official description
PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat AI Inference Server | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Satellite 6 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | All | CVEProject cvelistV5 (CNA) |
| jpadilla | pyjwt | < 2.12.0 | CVEProject cvelistV5 (CNA) |
References and advisories
35- https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f x_refsource_CONFIRM
- https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html
- https://access.redhat.com/security/cve/CVE-2026-32597 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2447194 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32597.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:13512 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13508 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17083 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13916 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19138 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12176 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22330 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21517 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13672 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19355 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8748 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8746 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8747 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13553 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13545 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10140 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10141 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10184 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42644 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6912 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6720 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:6926 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26226 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8437 vendor-advisoryx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-03-13
- Last updated
- 2026-09-10
- State
- Published
- Assigner (CNA)
- GitHub_M
Exploit prediction (EPSS)
0.29%
Probability of exploitation in 30 days
22.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- Proof of concept
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-345Insufficient Verification of Data Authenticity
- CWE-863Incorrect Authorization
- CWE-347Improper Verification of Cryptographic Signature