tocsin

CVE-2026-44798

2 advisories.

PyPI/nautobot CVE-2026-44798: high 7.1, EPSS 0.50%

Nautobot: GitRepository.current_head field should not be writable through REST API

Action: Upgrade nautobot to 2.4.33 or later.

pip install nautobot==3.1.2
pip install nautobot==2.4.33

Affected

introducedfixedlast affected
3.0.0a23.1.2-
02.4.33-

Fixed versions

3.1.22.4.33

Sources

CVE-2026-44798 · published · modified · JSON

PyPI/nautobot CVE-2026-44798: high 7.1, EPSS 0.50%

Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to directly set the cur

Action: Upgrade nautobot to 2.4.33 or later.

pip install nautobot==2.4.33
pip install nautobot==3.1.2

Affected

introducedfixedlast affected
02.4.33-
3.0.03.1.2-

Fixed versions

2.4.333.1.2

Sources

CVE-2026-44798 · published · modified · JSON