{"action":"Upgrade nautobot to 2.4.33 or later.","affected":[{"fixed":"2.4.33","introduced":"0"},{"fixed":"3.1.2","introduced":"3.0.0"}],"component":"nautobot","cve_ids":["CVE-2026-44794"],"ecosystem":"PyPI","epss":0.00304,"exploited":false,"fixed_versions":["2.4.33","3.1.2"],"ghsa_id":"GHSA-wpxj-44w3-2j6x","id":"tcs_01M5KGY6VN0VRMPQMEP5116GC3","modified_at":"2026-07-13T07:15:37.257091394Z","published_at":"2026-05-28T18:16:33.203Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2225","https://github.com/nautobot/nautobot/releases/tag/v2.4.33","https://github.com/nautobot/nautobot/releases/tag/v3.1.2","https://github.com/nautobot/nautobot/commit/36cde7148a207234de6212ec074f321dbc9d1b5b","https://github.com/nautobot/nautobot/commit/9918bdb9bcf1eb42cda72c344f420a64ef7665f1","https://github.com/nautobot/nautobot/security/advisories/GHSA-wpxj-44w3-2j6x"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-2225","url":"https://osv.dev/vulnerability/PYSEC-2026-2225"}],"summary":"Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, in the case of inter-object references via GenericForeignKey (a pattern allowing an object to referenc"}