CVE-2026-34591

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 9, 2026

Last Seen

April 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

openSUSE 15.6 python-poetry Vulnerability Allows Arbitrary File Write57.9

A vulnerability identified as CVE-2026-34591 affects python-poetry versions from 1.4.0 to before 2.3.3. The flaw allows crafted wheels to contain '../' paths that the Poetry tool writes to disk without proper containment checks, leading to arbitrary file writes. This issue impacts users of openSUSE...