OESA-2026-3193

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3193
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3193
Upstream
Published
2026-08-01T11:12:04Z
Modified
2026-08-18T01:21:25.824691504Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
python-urwid security update
Details

Urwid is a console user interface library for Python. It includes many features useful for text console application developers

Security Fix(es):

The urwid web display backend (urwid/display/web.py) generates web session identifiers (urwid_id) in Screen.start() by concatenating two random.randrange(10**9) calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and the Mersenne Twister internal state is approximately 19,937 bits, so an attacker who observes approximately 334 session IDs (for example via the X-Urwid-ID HTTP response header) can fully reconstruct the internal state and predict all past and future session IDs (Path B). The same identifier is also used as the filename of a FIFO created in the world-listable /tmp directory (for example /tmp/urwid375487765176907690.in), so any local user on the host can list /tmp to enumerate active session tokens directly (Path A). With a valid session ID, an attacker can read the victim's terminal screen via the polling endpoint, inject keystrokes into the victim's session (yielding OS-level code execution with the session owner's privileges if the session runs a shell), and inject exit sequences or flood the FIFO to terminate or crash the session. A prior Bandit S311 warning on this usage was suppressed with # noqa: S311 rather than fixed(CVE-2026-9323)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
python-urwid

Package

Name
python-urwid
Purl
pkg:rpm/openEuler/python-urwid&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.2-3.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "python-urwid-debuginfo-2.1.2-3.oe2003sp4.x86_64.rpm",
        "python-urwid-debugsource-2.1.2-3.oe2003sp4.x86_64.rpm",
        "python3-urwid-2.1.2-3.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "python-urwid-debuginfo-2.1.2-3.oe2003sp4.aarch64.rpm",
        "python-urwid-debugsource-2.1.2-3.oe2003sp4.aarch64.rpm",
        "python3-urwid-2.1.2-3.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "python-urwid-2.1.2-3.oe2003sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json"
openEuler:22.03-LTS-SP4
python-urwid

Package

Name
python-urwid
Purl
pkg:rpm/openEuler/python-urwid&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.2-4.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "python-urwid-debuginfo-2.1.2-4.oe2203sp4.x86_64.rpm",
        "python-urwid-debugsource-2.1.2-4.oe2203sp4.x86_64.rpm",
        "python3-urwid-2.1.2-4.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "python-urwid-debuginfo-2.1.2-4.oe2203sp4.aarch64.rpm",
        "python-urwid-debugsource-2.1.2-4.oe2203sp4.aarch64.rpm",
        "python3-urwid-2.1.2-4.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "python-urwid-2.1.2-4.oe2203sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json"
openEuler:24.03-LTS-SP1
python-urwid

Package

Name
python-urwid
Purl
pkg:rpm/openEuler/python-urwid&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.2-6.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp1.x86_64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp1.x86_64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp1.aarch64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp1.aarch64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "python-urwid-2.1.2-6.oe2403sp1.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json"
openEuler:24.03-LTS-SP3
python-urwid

Package

Name
python-urwid
Purl
pkg:rpm/openEuler/python-urwid&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.2-6.oe2403sp3

Ecosystem specific 

{
    "x86_64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp3.x86_64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp3.x86_64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp3.aarch64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp3.aarch64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "python-urwid-2.1.2-6.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json"
openEuler:24.03-LTS-SP4
python-urwid

Package

Name
python-urwid
Purl
pkg:rpm/openEuler/python-urwid&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.2-6.oe2403sp4

Ecosystem specific 

{
    "x86_64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp4.x86_64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp4.x86_64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp4.x86_64.rpm"
    ],
    "aarch64": [
        "python-urwid-debuginfo-2.1.2-6.oe2403sp4.aarch64.rpm",
        "python-urwid-debugsource-2.1.2-6.oe2403sp4.aarch64.rpm",
        "python3-urwid-2.1.2-6.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "python-urwid-2.1.2-6.oe2403sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3193.json"