CVE-2026-34203
2 advisories.
PyPI/nautobot CVE-2026-34203: low 2.7, EPSS 0.34%
Nautobot: Management of users via REST API does not apply configured password validators
Action: Upgrade nautobot to 2.4.30 or later.
pip install nautobot==2.4.30pip install nautobot==3.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.30 | - |
| 3.0.0 | 3.0.10 | - |
Fixed versions
| 2.4.30 | 3.0.10 |
Sources
- osv: GHSA-xmpv-j7p2-j873
- https://github.com/nautobot/nautobot/security/advisories/GHSA-xmpv-j7p2-j873
- https://nvd.nist.gov/vuln/detail/CVE-2026-34203
- https://github.com/nautobot/nautobot/pull/8778
- https://github.com/nautobot/nautobot/pull/8779
- https://github.com/nautobot/nautobot/commit/589f7caf54124ad76bc9fcbb7bdcaa25627cd598
- https://github.com/nautobot/nautobot/commit/d1ef3135aa02fa07de061e8c085f8cce425fe8c9
- https://github.com/nautobot/nautobot
CVE-2026-34203 · published · modified · JSON
PyPI/nautobot CVE-2026-34203: medium 4.3, EPSS 0.34%
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to versions 2.4.30 and 3.0.10, user creation and editing via the REST API fails to apply the password validation rules defi
Action: Upgrade nautobot to 2.4.30 or later.
pip install nautobot==2.4.30pip install nautobot==3.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.30 | - |
| 3.0.0 | 3.0.10 | - |
Fixed versions
| 2.4.30 | 3.0.10 |
Sources
- osv: PYSEC-2026-2224
- https://github.com/nautobot/nautobot/commit/589f7caf54124ad76bc9fcbb7bdcaa25627cd598
- https://github.com/nautobot/nautobot/commit/d1ef3135aa02fa07de061e8c085f8cce425fe8c9
- https://github.com/nautobot/nautobot/pull/8778
- https://github.com/nautobot/nautobot/pull/8779
- https://github.com/nautobot/nautobot/security/advisories/GHSA-xmpv-j7p2-j873
CVE-2026-34203 · published · modified · JSON