Description
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
Due to missing recursion depth accounting inside the internal Any-handling logic, an attacker can supply deeply nested Any structures that bypass the intended recursion limit, eventually exhausting Python’s recursion stack and causing a RecursionError.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Python | Protobuf | <=v33.4 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | protobuf | 3.21.12-16 | — |
| Debian 13 | protobuf | 3.21.12-11+deb13u1 | — |
| Debian 12 | protobuf | 3.21.12-3+deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | protobuf | 3.21.12-15ubuntu1 | — |
| Ubuntu 26.04 LTS | protobuf | 3.21.12-15ubuntu1 | — |
| Ubuntu 25.10 | protobuf | 3.21.12-11ubuntu3.1 | — |
| Ubuntu 24.04 LTS | protobuf | 3.21.12-8.2ubuntu0.3 | — |
| Ubuntu 22.04 LTS | protobuf | 3.12.4-1ubuntu7.22.04.6 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | protobuf | 3.6.1.3-2ubuntu5.2+esm3 | — |
| Ubuntu Pro 18.04 LTS | protobuf | 3.0.0-9.1ubuntu1.1+esm4 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | protobuf +5 | 3.19.6-15.el10_1 | RHSA-2026:3094 |
| RHEL 9 | protobuf +5 | 3.14.0-17.el9_7 | RHSA-2026:3095 |
Show 8 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | protobuf +5 | 3.19.6-11.el10_0.1 | RHSA-2026:3218 |
| RHEL 9.6 EUS | protobuf +5 | 3.14.0-16.el9_6.1 | RHSA-2026:3219 |
| RHEL 9.4 EUS | protobuf +5 | 3.14.0-13.el9_4.1 | RHSA-2026:3059 |
| RHEL 9.2 E4S | protobuf +2 | 3.14.0-13.el9_2.1 | RHSA-2026:3220 |
| RHEL 9.0 E4S | protobuf +2 | 3.14.0-9.el9_0.1 | RHSA-2026:3097 |
| Red Hat Ansible Automation Platform Inside 2 | receptor +1 | 1.6.3-4.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform Developer 2 | automation-controller +1 | 4.6.26-1.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform Developer 2 | python3.12-django | 4.2.28-1.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform Developer 2 | receptor +1 | 1.6.3-4.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | automation-controller +4 | 4.6.26-1.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | automation-gateway +2 | 2.5.20260225-1.el8ap | RHSA-2026:3959 |
| Red Hat Ansible Automation Platform 2 | automation-platform-ui | 2.6.6-1.el9ap | RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | python3.12-aiohttp | 3.13.3-2.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | python3.12-django | 4.2.28-1.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | python3.12-protobuf | 5.29.6-1.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
| Red Hat Ansible Automation Platform 2 | receptor +1 | 1.6.3-4.el8ap | RHSA-2026:3959, RHSA-2026:3958 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | protobuf +5 | 3.19.6-15.el10_1 | ALSA-2026:3094 |
| AlmaLinux 9 | protobuf +5 | 3.14.0-17.el9_7 | ALSA-2026:3095 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | protobuf | 3.19.6-15.el10_1 | RLSA-2026:3094 |
| Rocky Linux 9 | protobuf | 3.14.0-17.el9_7 | RLSA-2026:3095 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0374-1 |
| SLES 15 SP6 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1 |
| SLES 15 SP5 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0517-1 |
| SLES 15 SP4 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0563-1 |
| SLES 3 | protobuf | 25.1-150600.16.16.1 | SUSE-SU-2026:0374-1 |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | protobuf +1 | 28.3-160000.3.1 | SUSE-SU-2026:20907-1 |
| SLES for SAP 16.0 | python-protobuf | 5.28.3-160000.3.1 | SUSE-SU-2026:20907-1 |
| SLES 16.0 | protobuf +1 | 28.3-160000.3.1 | SUSE-SU-2026:20907-1 |
| SLES 16.0 | python-protobuf | 5.28.3-160000.3.1 | SUSE-SU-2026:20907-1 |
| SLE Micro 6.2 | protobuf | 28.3-160000.3.1 | SUSE-SU-2026:20753-1 |
| SLE Micro 6.1 | protobuf | 23.4-slfo.1.1_3.1 | SUSE-SU-2026:20490-1 |
| SLE Micro 6.0 | protobuf | 23.4-11.1 | SUSE-SU-2026:20352-1 |
| SLE Micro 5.5 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0517-1 |
| SLE Micro 5.4 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0563-1 |
| SLE Micro 5.3 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1, SUSE-SU-2026:0563-1 |
| SLE Micro 5.2 | protobuf | 3.9.2-150200.4.30.1 | SUSE-SU-2026:0618-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | onnxruntime | 1.31.0-1.1 | openSUSE-SU-2026:12274-1 |
| openSUSE Tumbleweed | protobuf | 34.1-1.1 | openSUSE-SU-2026:10515-1 |
| openSUSE Leap 16.0 | protobuf +1 | 28.3-160000.3.1 | openSUSE-SU-2026:20390-1 |
| openSUSE Leap 16.0 | python-protobuf | 5.28.3-160000.3.1 | openSUSE-SU-2026:20390-1 |
| openSUSE Leap 15.6 | protobuf | 25.1-150600.16.16.1 | SUSE-SU-2026:0374-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | protobuf +9 | 3.19.6-1.amzn2023.0.3 | ALAS2023-2026-1407 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | protobuf | 25.3-6 | — |
| Azure Linux 3 | pytorch | 2.2.2-12 | — |
| Azure Linux 2 (CBL-Mariner) | mysql | 8.0.45-2 | — |
| Azure Linux 2 (CBL-Mariner) | protobuf | 3.17.3-5 | — |
| Azure Linux 2 (CBL-Mariner) | pytorch | 2.0.0-14 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | protobuf +5 | 3.19.6-15.el10_1 | ELSA-2026-3094 |
| Oracle Linux 9 | protobuf +5 | 3.14.0-17.el9_7 | ELSA-2026-3095 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | airflow-3 | 3.2.0-r0 | — |
| Wolfi rolling | datadog-agent-7.72-core-integrations | No fix yet | — |
| Wolfi rolling | datadog-agent-7.73-core-integrations | 7.73.3-r23 | — |
| Wolfi rolling | katib-earlystopping +4 | 0.19.0-r5 | — |
| Wolfi rolling | katib-suggestion-pbt-enas +1 | 0.19.0-r9 | — |
| Wolfi rolling | kserve-storage-controller | 0.16.0-r10 | — |
| Wolfi rolling | kubeflow-pipelines-apiserver | 2.17.0-r0 | — |
| Wolfi rolling | kubeflow-pipelines-metadata-writer-compat | 2.17.2-r4 | — |
| Wolfi rolling | kubeflow-pipelines-visualization-server | 2.16.0-r5 | — |
| Wolfi rolling | mitmproxy | 12.2.1-r0 | — |
| Wolfi rolling | open-webui | 0.8.3-r0 | — |
| Wolfi rolling | py3-cassandra-medusa | 0.27.1-r0 | — |
| Wolfi rolling | py3-semgrep | 1.150.0-r0 | — |
| Wolfi rolling | py3.10-protobuf +3 | 6.33.5-r0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
Vardhan0257/upb-any-recursion-audit ★ 1 · Sep 16, 2026
Ruby/PHP upb Any-recursion audit: falsified vs CVE-2026-0994 bug class
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | protobuf | >= 6.30.0rc1, < 6.33.5 | 6.33.5 | GHSA-7gcm-g887-7qv7 |
| PyPI | protobuf | < 5.29.6 | 5.29.6 | GHSA-7gcm-g887-7qv7 |
| PyPI | protobuf | < 5.29.6 · >= 6.30.0rc1, < 6.33.5 | 5.29.6, 6.33.5 | PYSEC-2026-1805 |
Advisories 28
- ALSA-2026:3094 Important: protobuf security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:3095 Important: protobuf security update AlmaLinux Security Advisories · Oct 29, 2026
- openSUSE-SU-2026:12274-1 libonnxruntime1-1.31.0-1.1 on GA media SUSE / openSUSE Security Updates · Oct 27, 2026
- WID-SEC-2026-0480 Red Hat Enterprise Linux (Python Protobuf): Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 21, 2026
- RHSA-2026:3959 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3958 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:3219 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3220 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3218 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3097 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3094 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3095 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- RHSA-2026:3059 Red Hat Security Advisory: protobuf security update Red Hat Security Advisories (RHSA) · Sep 1, 2026
- openSUSE-SU-2026:10515-1 libprotobuf-lite34_1_0-32bit-34.1-1.1 on GA media SUSE / openSUSE Security Updates · Apr 10, 2026
- SUSE-SU-2026:20907-1 Security update for protobuf SUSE / openSUSE Security Updates · Apr 2, 2026
- openSUSE-SU-2026:20390-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 26, 2026
- SUSE-SU-2026:20753-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 25, 2026
- SUSE-SU-2026:20352-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20490-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0517-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0374-1 Security update for protobuf SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0618-1 Security update for protobuf SUSE / openSUSE Security Updates · Feb 26, 2026
- RLSA-2026:3094 Important: protobuf security update Rocky Linux Security Advisories · Feb 24, 2026
- RLSA-2026:3095 Important: protobuf security update Rocky Linux Security Advisories · Feb 24, 2026
- ELSA-2026-3094 Important: protobuf security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Feb 23, 2026
- ELSA-2026-3095 Important: protobuf security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Feb 23, 2026
- ALAS2023-2026-1407 Important: protobuf security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 18, 2026
- SUSE-SU-2026:0563-1 Security update for protobuf SUSE / openSUSE Security Updates · Feb 17, 2026