---
schema_version: '1.0'
id: security-20260711-d6cb41
url: https://osv.dev/vulnerability/PYSEC-2026-87
url_hash: d6cb41bd3a154781a124ec200bbbb34b663332d6a0c9902b294cde73414b156c
canonical_url: https://osv.dev/vulnerability/PYSEC-2026-87
source: osv:pypa
category: security/library
category_raw: cve/library
region: null
tags:
- cve
- CVE-2026-41066
- PYSEC-2026-87
- severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- lxml
- PyPI
lang: en
published_at: '2026-04-24T17:16:20Z'
fetched_at: '2026-07-11T06:37:18Z'
updated_at: '2026-07-11T06:39:11Z'
status: published
content_hash: 49f28872047023b8e915cf94f9926ff28ed133ffbb48cad37879e3ed6583b59e
license_note: full
summary: lxml is a library for processing XML and HTML in the Python language. Prior
  to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True)
  allows untrusted XML input to read local files. Setting the resolve_entities option
  explicitly to resolv
summary_source: rss
summary_en: lxml is a library for processing XML and HTML in the Python language.
  Prior to 6.1.0, using either of the two parsers in the default configuration (with
  resolve_entities=True) allows untrusted XML input to read local files. Setting the
  resolve_entities option explicitly to resolv
entities: []
key_facts: []
related: []
related_auto: []
title: CVE-2026-41066 — lxml
---

# CVE-2026-41066 — lxml

## TL;DR
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolv

## Key Points
- cve / CVE-2026-41066 / PYSEC-2026-87 / severity:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N / lxml / PyPI

## Details
**Severity:** CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
**Advisory:** PYSEC-2026-87 (CVE-2026-41066)

**Affected (your watchlist):**
- `PyPI:lxml` 6.0.2 → fixed in 6.1.0 [docker/docker-strands]

**Details:**
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.

**References:**
- https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw
- https://bugs.launchpad.net/lxml/+bug/2146291

_Data: OSV.dev (upstream: pypa) — https://osv.dev/vulnerability/PYSEC-2026-87_

## Source
元記事: [CVE-2026-41066 — lxml](https://osv.dev/vulnerability/PYSEC-2026-87) — published 2026-04-24T17:16:20Z