CPython 3.14.10 hashlib FIPS enforcement regression
CVE-2026-119170 Published on November 6, 2026

Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
There was a regression in how FIPS algorithms were enforced for the hashlib module. Only users that are using OpenSSL in FIPS mode are affected. Only Python 3.14.10 is affected, all other Python versions are unaffected.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-119170 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE

Products Associated with CVE-2026-119170

Want to know whenever a new CVE is published for Python? stack.watch will email you.

Python

Affected Versions

Python Software Foundation CPython: