{"id":"CVE-2026-69243","title":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python","summary":"AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attack…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L","cwe":["CWE-444"],"vendor":"Red Hat","product":"Red Hat OpenShift AI 2.25","affected":["exploit_intelligence","lightspeed_core","migration_toolkit_for_applications 8","openshift_lightspeed","ai_inference_server","ansible_automation_platform 2","ansible_automation_platform_ansible_core 2","enterprise_linux_ai_rhel_ai 3","openshift_ai_rhoai","satellite 6","update_infrastructure_4_for_cloud_providers","update_infrastructure 5","ansible_automation_platform_2_5_for_rhel 8","satellite_6_16_for_rhel 8","ansible_automation_platform_2_5_for_rhel 9","ansible_automation_platform_2_6_for_rhel 9","satellite_6_16_for_rhel 9","satellite_6_17_for_rhel 9","satellite_6_18_for_rhel 9","satellite_6_19_for_rhel 9","ansible_automation_platform 2.6","ansible_automation_platform 2.7","discovery 2","openshift_ai 2.25","openshift_ai 3.4","satellite 6.18","satellite 6.19"],"patched":["ansible_automation_platform_2_5_for_rhel 8","satellite_6_16_for_rhel 8","ansible_automation_platform_2_5_for_rhel 9","ansible_automation_platform_2_6_for_rhel 9","satellite_6_16_for_rhel 9","satellite_6_17_for_rhel 9","satellite_6_18_for_rhel 9","satellite_6_19_for_rhel 9","ansible_automation_platform 2.6","ansible_automation_platform 2.7","discovery 2","openshift_ai 2.25","openshift_ai 3.4","satellite 6.18","satellite 6.19"],"published":"2026-08-03","updated":"2026-09-10","sourceUpdated":"2026-09-10T20:36:14.340","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69243","references":[{"url":"https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98","label":"security-advisories@github.com"},{"url":"https://github.com/aio-libs/aiohttp/pull/13017","label":"security-advisories@github.com"},{"url":"https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2","label":"security-advisories@github.com"},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v","label":"security-advisories@github.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69243.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-69243"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510831"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69243"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69243"},{"url":"https://access.redhat.com/errata/RHSA-2026:59135"},{"url":"https://access.redhat.com/errata/RHSA-2026:63327"},{"url":"https://access.redhat.com/errata/RHSA-2026:59136"},{"url":"https://access.redhat.com/errata/RHSA-2026:63387"},{"url":"https://access.redhat.com/errata/RHSA-2026:63386"},{"url":"https://access.redhat.com/errata/RHSA-2026:63385"},{"url":"https://access.redhat.com/errata/RHSA-2026:59155"},{"url":"https://access.redhat.com/errata/RHSA-2026:59153"},{"url":"https://access.redhat.com/errata/RHSA-2026:54760"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520"},{"url":"https://access.redhat.com/errata/RHSA-2026:63334"},{"url":"https://access.redhat.com/errata/RHSA-2026:63337"},{"url":"https://github.com/advisories/GHSA-mfx4-hv73-q22v"},{"url":"https://github.com/aio-libs/aiohttp"},{"url":"https://access.redhat.com/errata/RHSA-2026:68696"},{"url":"https://access.redhat.com/errata/RHSA-2026:68699"},{"url":"https://access.redhat.com/errata/RHSA-2026:68698"},{"url":"https://access.redhat.com/errata/RHSA-2026:68697"},{"url":"https://access.redhat.com/errata/RHSA-2026:67279"},{"url":"https://access.redhat.com/errata/RHSA-2026:68770"},{"url":"https://access.redhat.com/errata/RHSA-2026:68775"}],"tags":["nvd","exploit-available","csaf","vex","red-hat","ghsa","pip","osv"],"epss":0.00431,"epssPercentile":0.36829,"exploits":{"github":1,"githubRepos":["https://github.com/JVBotelho/cve-2026-69243-poc-aiohttp-smuggling"],"checkedAt":"2026-09-21T15:30:16.444Z"},"exploitAvailable":true,"aliases":["GHSA-mfx4-hv73-q22v","PYSEC-2026-3546"],"ecosystem":"pip","cvssSource":"vendor","ingestedAt":"2026-08-03T21:30:01.573Z","slug":"CVE-2026-69243","body":"## Overview\n\nAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smuggling attack relating to WebSocket upgrades. If using the server-side component, an attacker may be able to execute a request smuggling vulnerability using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade request with a body could cause the parser to switch protocols before the complete request body was received, leaving trailing bytes to be handled as upgraded-protocol or pipelined data rather than normal HTTP body data. This issue is fixed in version 3.14.2.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Package advisory (CVE-2026-69243)\n\nAffected packages:\n\n- `aiohttp <= 3.14.1`\n\nPatched in:\n\n- `aiohttp 3.14.2`\n\nSource: https://github.com/advisories/GHSA-mfx4-hv73-q22v\n\n## Vendor advisories\n\n- **RHSA-2026:59135** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:59135)\n- **RHSA-2026:63327** · Red Hat · fixed in: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:63327)\n- **RHSA-2026:59136** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 for RHEL 9 · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:59136)\n- **RHSA-2026:63387** · Red Hat · fixed in: Red Hat Satellite 6.17 for RHEL 9 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:63387)\n- **RHSA-2026:63386** · Red Hat · fixed in: Red Hat Satellite 6.18 for RHEL 9 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:63386)\n- **RHSA-2026:63385** · Red Hat · fixed in: Red Hat Satellite 6.19 for RHEL 9 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:63385)\n- **RHSA-2026:59155** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:59155)\n- **RHSA-2026:59153** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.7 · released 2026-08-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:59153)\n- **RHSA-2026:54760** · Red Hat · fixed in: Red Hat Discovery 2 · released 2026-08-13 · [advisory](https://access.redhat.com/errata/RHSA-2026:54760)\n- **RHSA-2026:65126** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-09-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:65126)\n- **RHSA-2026:60520** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:60520)\n- **Red Hat VEX** · Moderate · affected: Exploit Intelligence, Lightspeed Core, Migration Toolkit for Applications 8, OpenShift Lightspeed, Red Hat AI Inference Server, Red Hat Ansible Automation Platform 2, … · no fix planned: Exploit Intelligence, Red Hat Ansible Automation Platform 2, Red Hat Ansible Automation Platform Ansible Core 2, Red Hat Update Infrastructure 4 for Cloud Providers, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69243.json)\n- **RHSA-2026:68696** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68696)\n- **RHSA-2026:68699** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68699)\n- **RHSA-2026:68698** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68698)\n- **RHSA-2026:68697** · Red Hat · fixed in: Red Hat AI Inference Server 3.3 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:68697)","depth":"midnight","depthScore":51,"depthScoreParts":{"impact":38.5,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201873,"id":"CVE-2026-69243","ts":1789399943778,"field":"cvss","old":null,"new":"7"},{"seq":201872,"id":"CVE-2026-69243","ts":1789399943778,"field":"severity","old":"medium","new":"high"},{"seq":200603,"id":"CVE-2026-69243","ts":1789397469045,"field":"cvss","old":"7","new":null},{"seq":200602,"id":"CVE-2026-69243","ts":1789397469045,"field":"severity","old":"high","new":"medium"},{"seq":198520,"id":"CVE-2026-69243","ts":1789392057867,"field":"cvss","old":null,"new":"7"},{"seq":198519,"id":"CVE-2026-69243","ts":1789392057867,"field":"severity","old":"medium","new":"high"},{"seq":196311,"id":"CVE-2026-69243","ts":1789383673510,"field":"cvss","old":"7","new":null},{"seq":196310,"id":"CVE-2026-69243","ts":1789383673510,"field":"severity","old":"high","new":"medium"},{"seq":195240,"id":"CVE-2026-69243","ts":1789380524782,"field":"cvss","old":null,"new":"7"},{"seq":195239,"id":"CVE-2026-69243","ts":1789380524782,"field":"severity","old":"medium","new":"high"},{"seq":194027,"id":"CVE-2026-69243","ts":1789378615329,"field":"cvss","old":"7","new":null},{"seq":194026,"id":"CVE-2026-69243","ts":1789378615329,"field":"severity","old":"high","new":"medium"},{"seq":192814,"id":"CVE-2026-69243","ts":1789376448867,"field":"cvss","old":null,"new":"7"},{"seq":192813,"id":"CVE-2026-69243","ts":1789376448867,"field":"severity","old":"medium","new":"high"},{"seq":191601,"id":"CVE-2026-69243","ts":1789373523245,"field":"cvss","old":"7","new":null},{"seq":191600,"id":"CVE-2026-69243","ts":1789373523245,"field":"severity","old":"high","new":"medium"},{"seq":190386,"id":"CVE-2026-69243","ts":1789369399556,"field":"cvss","old":null,"new":"7"},{"seq":190385,"id":"CVE-2026-69243","ts":1789369399556,"field":"severity","old":"medium","new":"high"},{"seq":189173,"id":"CVE-2026-69243","ts":1789368320172,"field":"cvss","old":"7","new":null},{"seq":189172,"id":"CVE-2026-69243","ts":1789368320172,"field":"severity","old":"high","new":"medium"},{"seq":187956,"id":"CVE-2026-69243","ts":1789365188412,"field":"cvss","old":null,"new":"7"},{"seq":187955,"id":"CVE-2026-69243","ts":1789365188412,"field":"severity","old":"medium","new":"high"},{"seq":186743,"id":"CVE-2026-69243","ts":1789363387104,"field":"cvss","old":"7","new":null},{"seq":186742,"id":"CVE-2026-69243","ts":1789363387104,"field":"severity","old":"high","new":"medium"},{"seq":185529,"id":"CVE-2026-69243","ts":1789361170158,"field":"cvss","old":null,"new":"7"},{"seq":185528,"id":"CVE-2026-69243","ts":1789361170158,"field":"severity","old":"medium","new":"high"},{"seq":184316,"id":"CVE-2026-69243","ts":1789358244049,"field":"cvss","old":"7","new":null},{"seq":184315,"id":"CVE-2026-69243","ts":1789358244049,"field":"severity","old":"high","new":"medium"},{"seq":182567,"id":"CVE-2026-69243","ts":1789354266589,"field":"cvss","old":null,"new":"7"},{"seq":182566,"id":"CVE-2026-69243","ts":1789354266589,"field":"severity","old":"medium","new":"high"},{"seq":181360,"id":"CVE-2026-69243","ts":1789353220296,"field":"cvss","old":"7","new":null},{"seq":181359,"id":"CVE-2026-69243","ts":1789353220296,"field":"severity","old":"high","new":"medium"},{"seq":180153,"id":"CVE-2026-69243","ts":1789350217415,"field":"cvss","old":null,"new":"7"},{"seq":180152,"id":"CVE-2026-69243","ts":1789350217415,"field":"severity","old":"medium","new":"high"},{"seq":178946,"id":"CVE-2026-69243","ts":1789348186314,"field":"cvss","old":"7","new":null},{"seq":178945,"id":"CVE-2026-69243","ts":1789348186314,"field":"severity","old":"high","new":"medium"},{"seq":177739,"id":"CVE-2026-69243","ts":1789346322543,"field":"cvss","old":null,"new":"7"},{"seq":177738,"id":"CVE-2026-69243","ts":1789346322543,"field":"severity","old":"medium","new":"high"},{"seq":176532,"id":"CVE-2026-69243","ts":1789343101037,"field":"cvss","old":"7","new":null},{"seq":176531,"id":"CVE-2026-69243","ts":1789343101037,"field":"severity","old":"high","new":"medium"},{"seq":174649,"id":"CVE-2026-69243","ts":1789334831989,"field":"cvss","old":null,"new":"7"},{"seq":174648,"id":"CVE-2026-69243","ts":1789334831989,"field":"severity","old":"medium","new":"high"},{"seq":173444,"id":"CVE-2026-69243","ts":1789333583310,"field":"cvss","old":"7","new":null},{"seq":173443,"id":"CVE-2026-69243","ts":1789333583310,"field":"severity","old":"high","new":"medium"},{"seq":172258,"id":"CVE-2026-69243","ts":1789331046689,"field":"cvss","old":null,"new":"7"},{"seq":172257,"id":"CVE-2026-69243","ts":1789331046689,"field":"severity","old":"medium","new":"high"},{"seq":171072,"id":"CVE-2026-69243","ts":1789328687187,"field":"cvss","old":"7","new":null},{"seq":171071,"id":"CVE-2026-69243","ts":1789328687187,"field":"severity","old":"high","new":"medium"},{"seq":169867,"id":"CVE-2026-69243","ts":1789327117978,"field":"cvss","old":null,"new":"7"},{"seq":169866,"id":"CVE-2026-69243","ts":1789327117978,"field":"severity","old":"medium","new":"high"}]}