CVE & CISA-KEV CatalogNVD
CVE-2025-50181
MEDIUM5.3
CVSS v3
Description
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users are not affected. An application attempting to mitigate SSRF or open redirect vulnerabilities by disabling redirects at the PoolManager level will remain vulnerable. This issue has been patched in version 2.5.0.
How to fix
Remediation Available
python-urllib3Debian
Fixed in:1.26.5-1~exp1+deb11u2CVE-2025-50181
Fixed in:1.26.12-1+deb12u2CVE-2025-50181
Fixed in:2.3.0-3CVE-2025-50181
Fixed in:2.3.0-3CVE-2025-50181
registry.redhat.io/quay/clairRocky
Fixed in:rhel8@sha256:aad14ca0de55666d13c1a12511cea2c071d0a1c7c5e1b9ed9d7c70d157225293_ppc64leRHSA-2026:4215
Fixed in:rhel8@sha256:1ec5bd4c50f080096a3579e498ac9301acf3927834f7773996911db8e11d2279_arm64RHSA-2026:4215
Fixed in:rhel8@sha256:a4037bacb4f26a947e511da97519fe318b986e31ef4689a2ec7499789096dc2b_amd64RHSA-2026:4215
Fixed in:rhel8@sha256:698a1ae2e5e2669d5a328d99deb4b8c67f2d7dd03d878600ce13f8dfb154fcf6_s390xRHSA-2026:4215
registry.redhat.io/quay/clairRed Hat / RHEL
Fixed in:rhel8@sha256:698a1ae2e5e2669d5a328d99deb4b8c67f2d7dd03d878600ce13f8dfb154fcf6_s390xRHSA-2026:4215
Fixed in:rhel8@sha256:a4037bacb4f26a947e511da97519fe318b986e31ef4689a2ec7499789096dc2b_amd64RHSA-2026:4215
Fixed in:rhel8@sha256:aad14ca0de55666d13c1a12511cea2c071d0a1c7c5e1b9ed9d7c70d157225293_ppc64leRHSA-2026:4215
Fixed in:rhel8@sha256:1ec5bd4c50f080096a3579e498ac9301acf3927834f7773996911db8e11d2279_arm64RHSA-2026:4215
registry.redhat.io/quay/quayRed Hat / RHEL
Fixed in:rhel8@sha256:e2a2347a1ed65e94a13fd0330e7922339096d725733071a1f9eb4c413be5eb90_ppc64leRHSA-2026:4215
Fixed in:builder-rhel8@sha256:aea11bfd317b3c0d414f7c1ca5c7768ebbe2bf984d48f2960ec309463c383ced_amd64RHSA-2026:4215
Fixed in:operator-bundle@sha256:ef354fd2be18bcce59d2880843ad295ac8610c1d2dd1565a941ab18e77eec27e_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:6e421e848fac1ffd749e1761acd51d41419d73a55e610170e3c6c53294ec061e_amd64RHSA-2026:4215
Fixed in:rhel8@sha256:225e2bed98b80e753ba2eca6b121a7295b20633b25b8098b7dce66efc2bc1b70_amd64RHSA-2026:4215
Fixed in:builder-rhel8@sha256:47b66c0f25e0be3b5e533422d5591baadc5f7653ec4c97d8398d6cc3451f5ed9_arm64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:7d3344ce19373fdf5cc721f0abbb2c2ee87d079b96d0dd4c7350621cfa57a322_arm64RHSA-2026:4215
Fixed in:rhel8@sha256:05cc4b4410de27e32897492effb21362d8c1bc8cc56e9408fc9a19f9f3149899_arm64RHSA-2026:4215
Fixed in:builder-rhel8@sha256:00c8d4e64fd7246b51a23807d56421a63c5cb201565e50fcdd70623d208b4c80_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:91844fb97cac49e78054bd9547222aadf1762f1c0fd05feb0b86f9d94787512b_ppc64leRHSA-2026:4215
Fixed in:builder-rhel8@sha256:78d3fada736cdb40efb692c6eede03c9a380e3d44e3b4ca338bf3676e1c1b745_s390xRHSA-2026:4215
Fixed in:operator-rhel8@sha256:420be03e698e066bbaa96c7334e1a6b14793836f437b53ee1d961414115622c4_s390xRHSA-2026:4215
Fixed in:rhel8@sha256:51881be0039c3a7df9ad588060955dc3f0ea6eef28a35ebc4fe146e73316e2a4_s390xRHSA-2026:4215
registry.redhat.io/quay/quayRocky
Fixed in:builder-rhel8@sha256:aea11bfd317b3c0d414f7c1ca5c7768ebbe2bf984d48f2960ec309463c383ced_amd64RHSA-2026:4215
Fixed in:operator-bundle@sha256:ef354fd2be18bcce59d2880843ad295ac8610c1d2dd1565a941ab18e77eec27e_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:6e421e848fac1ffd749e1761acd51d41419d73a55e610170e3c6c53294ec061e_amd64RHSA-2026:4215
Fixed in:rhel8@sha256:225e2bed98b80e753ba2eca6b121a7295b20633b25b8098b7dce66efc2bc1b70_amd64RHSA-2026:4215
Fixed in:builder-rhel8@sha256:47b66c0f25e0be3b5e533422d5591baadc5f7653ec4c97d8398d6cc3451f5ed9_arm64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:7d3344ce19373fdf5cc721f0abbb2c2ee87d079b96d0dd4c7350621cfa57a322_arm64RHSA-2026:4215
Fixed in:rhel8@sha256:05cc4b4410de27e32897492effb21362d8c1bc8cc56e9408fc9a19f9f3149899_arm64RHSA-2026:4215
Fixed in:builder-rhel8@sha256:00c8d4e64fd7246b51a23807d56421a63c5cb201565e50fcdd70623d208b4c80_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:91844fb97cac49e78054bd9547222aadf1762f1c0fd05feb0b86f9d94787512b_ppc64leRHSA-2026:4215
Fixed in:rhel8@sha256:e2a2347a1ed65e94a13fd0330e7922339096d725733071a1f9eb4c413be5eb90_ppc64leRHSA-2026:4215
Fixed in:builder-rhel8@sha256:78d3fada736cdb40efb692c6eede03c9a380e3d44e3b4ca338bf3676e1c1b745_s390xRHSA-2026:4215
Fixed in:operator-rhel8@sha256:420be03e698e066bbaa96c7334e1a6b14793836f437b53ee1d961414115622c4_s390xRHSA-2026:4215
Fixed in:rhel8@sha256:51881be0039c3a7df9ad588060955dc3f0ea6eef28a35ebc4fe146e73316e2a4_s390xRHSA-2026:4215
registry.redhat.io/quay/quay-bridgeRed Hat / RHEL
Fixed in:operator-rhel8@sha256:1ff62272e3139cfc7abf3511e706bcdffeabfbbcacfee18508bd629cea20fd78_amd64RHSA-2026:4215
Fixed in:operator-bundle@sha256:c4133c994168c764a87f34a39a2fa66fa0c04c0c186781cf024e5e41f62280d0_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:aa1b44b1ee74a3ba6aa63eef2003077b1a9a5c067a6aa590eeb8fe30a93fe60b_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:2f0c540c7269e27be3e0d4f988a4d19371a80b8b0684cff74d21851608636c88_arm64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:c33a90cf0b733a8fd0514f9c6cd53c22ff307c15b80c582736ab88ed26e967f7_s390xRHSA-2026:4215
registry.redhat.io/quay/quay-bridgeRocky
Fixed in:operator-bundle@sha256:c4133c994168c764a87f34a39a2fa66fa0c04c0c186781cf024e5e41f62280d0_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:c33a90cf0b733a8fd0514f9c6cd53c22ff307c15b80c582736ab88ed26e967f7_s390xRHSA-2026:4215
Fixed in:operator-rhel8@sha256:aa1b44b1ee74a3ba6aa63eef2003077b1a9a5c067a6aa590eeb8fe30a93fe60b_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:1ff62272e3139cfc7abf3511e706bcdffeabfbbcacfee18508bd629cea20fd78_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:2f0c540c7269e27be3e0d4f988a4d19371a80b8b0684cff74d21851608636c88_arm64RHSA-2026:4215
registry.redhat.io/quay/quay-builder-qemuRocky
Fixed in:rhcos-rhel8@sha256:0a79d63a51f959c7704662cf7370da2bd76cc22dd13acefe6eebe6b38881f98a_ppc64leRHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:bec2f493457c5fec6af7309d9cc09c4a04632b9050b03720861cb05ac77d1d10_s390xRHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:9e2fd6eb656ea932d83f001922aa46e7cef7796c404dbe7ab6393820149941a8_arm64RHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:fd57da947aee5538acc22c9bbc537eeed955334f7bcce8683fe6eb325847812f_amd64RHSA-2026:4215
registry.redhat.io/quay/quay-builder-qemuRed Hat / RHEL
Fixed in:rhcos-rhel8@sha256:fd57da947aee5538acc22c9bbc537eeed955334f7bcce8683fe6eb325847812f_amd64RHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:bec2f493457c5fec6af7309d9cc09c4a04632b9050b03720861cb05ac77d1d10_s390xRHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:0a79d63a51f959c7704662cf7370da2bd76cc22dd13acefe6eebe6b38881f98a_ppc64leRHSA-2026:4215
Fixed in:rhcos-rhel8@sha256:9e2fd6eb656ea932d83f001922aa46e7cef7796c404dbe7ab6393820149941a8_arm64RHSA-2026:4215
registry.redhat.io/quay/quay-container-securityRocky
Fixed in:operator-rhel8@sha256:191c87e2d307ccc97699cf0ff4b7217ca6d4c6fd51b01e93abc423b7b3b688ba_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:7a15aecd0b757726ec8dd1fc2d8d0e611fba1b77ce7857604bfa56314bc5189a_arm64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:19afededc1a3f54a6c3d85c4e0e35043e1b0d2074f0d983e3393c4694348ae58_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:14d025b088b84df61332fd60382161cccfae6fc7310cdd7fd0a96432a1dcbb0b_s390xRHSA-2026:4215
Fixed in:operator-bundle@sha256:a7f0bcbf21692be996d8beba4228d51d047237a3dad43a5d61e1a379742b5101_amd64RHSA-2026:4215
registry.redhat.io/quay/quay-container-securityRed Hat / RHEL
Fixed in:operator-rhel8@sha256:191c87e2d307ccc97699cf0ff4b7217ca6d4c6fd51b01e93abc423b7b3b688ba_amd64RHSA-2026:4215
Fixed in:operator-bundle@sha256:a7f0bcbf21692be996d8beba4228d51d047237a3dad43a5d61e1a379742b5101_amd64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:19afededc1a3f54a6c3d85c4e0e35043e1b0d2074f0d983e3393c4694348ae58_ppc64leRHSA-2026:4215
Fixed in:operator-rhel8@sha256:7a15aecd0b757726ec8dd1fc2d8d0e611fba1b77ce7857604bfa56314bc5189a_arm64RHSA-2026:4215
Fixed in:operator-rhel8@sha256:14d025b088b84df61332fd60382161cccfae6fc7310cdd7fd0a96432a1dcbb0b_s390xRHSA-2026:4215
registry.redhat.io/rhceph/grafanaRocky
Fixed in:rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64leRHSA-2026:33154
Fixed in:rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390xRHSA-2026:33154
Fixed in:rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64RHSA-2026:33154
registry.redhat.io/rhceph/grafanaRed Hat / RHEL
Fixed in:rhel9@sha256:8bcb8976618246bc3c73f7986b7d566d9d26cda16c6043f6820f6efa2f8a3c2c_amd64RHSA-2026:33154
Fixed in:rhel9@sha256:eb16743753a9a8d1c781d211a52e7e7ef1eb85c5d816b1328b48196a330af717_ppc64leRHSA-2026:33154
Fixed in:rhel9@sha256:febdc339e022b45a25d0956536adda36c761e71770a0d60475ea7ae4a331d898_s390xRHSA-2026:33154
registry.redhat.io/rhceph/keepalivedRed Hat / RHEL
Fixed in:rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390xRHSA-2026:33154
Fixed in:rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64RHSA-2026:33154
Fixed in:rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64leRHSA-2026:33154
registry.redhat.io/rhceph/keepalivedRocky
Fixed in:rhel9@sha256:44d1c4858b983250a223f56d1dbb4f255bb9c2ac50d0f5dbabdc62f9519789b6_ppc64leRHSA-2026:33154
Fixed in:rhel9@sha256:da760b2fd9c2636f5b82e1d3b332f2efe0bbbbbe0624bf4c912bda10be057fe3_amd64RHSA-2026:33154
Fixed in:rhel9@sha256:3a4815d3406f797d153af4ec0f8d599981f44bb7fd98429b3ea8f935b4b96d30_s390xRHSA-2026:33154
registry.redhat.io/rhceph/rhcephRocky
Fixed in:promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64RHSA-2026:33154
Fixed in:7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64RHSA-2026:33154
Fixed in:7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64leRHSA-2026:33154
Fixed in:7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390xRHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64leRHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390xRHSA-2026:33154
Fixed in:promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390xRHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64RHSA-2026:33154
Fixed in:promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64leRHSA-2026:33154
registry.redhat.io/rhceph/rhcephRed Hat / RHEL
Fixed in:7-rhel9@sha256:57eaf98ed402584fca1e6b804ad97fbf2287219ad617f69c96b0cd48279e7a98_ppc64leRHSA-2026:33154
Fixed in:promtail-rhel9@sha256:3068c146d01dd9e5065d4a18158e57be1dbe88d53ecc71b44ab832f359b9537e_s390xRHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:3b07124326d4fb24eabbc3127068a00a8e54873943a9e4896f276e9be1f5c8bb_s390xRHSA-2026:33154
Fixed in:7-rhel9@sha256:fe482274c22406b77c3fd4bd4822b10f0d1e94bdc7a69fa1843a2f3d85860c8a_s390xRHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:14f8f48bbcbd2f61be00cf5cbe636fa13f65404732e115fdb910bbce7578c734_amd64RHSA-2026:33154
Fixed in:haproxy-rhel9@sha256:4c30728f5f5c19a7b570bd677e3733c68dff8d661da292a304318fdc87d235c7_ppc64leRHSA-2026:33154
Fixed in:promtail-rhel9@sha256:ee7d1dbad6fbd2a80b00db3cd949bd6b45f17b90aec8400d79c6ee2d6dea1117_ppc64leRHSA-2026:33154
Fixed in:7-rhel9@sha256:be5cbfcebfac4d05e8b1e6c39e00a7571987d1a7efd995b4ea6333c8c0a7e812_amd64RHSA-2026:33154
Fixed in:promtail-rhel9@sha256:3529361e69b98fa7875f542d8e2fc90cbbc694b12b442ee354b8c008f623d2f7_amd64RHSA-2026:33154
registry.redhat.io/rhceph/snmpRed Hat / RHEL
Fixed in:notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64leRHSA-2026:33154
Fixed in:notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390xRHSA-2026:33154
Fixed in:notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64RHSA-2026:33154
registry.redhat.io/rhceph/snmpRocky
Fixed in:notifier-rhel9@sha256:09c6b326c8582909aac8a4f782ff0ff352cc3347a26f0e282be7537dfa746853_s390xRHSA-2026:33154
Fixed in:notifier-rhel9@sha256:014266a322f1df6bcec437f06ff66e8dee91a2f84e6a8333b6035b0031a165b6_amd64RHSA-2026:33154
Fixed in:notifier-rhel9@sha256:eb7dcdf167e1319f218aae5bf042ad79336821e854dfaf6283b38f0b1b186734_ppc64leRHSA-2026:33154
python-pipUbuntu
Fixed in:22.0.2+dfsg-1ubuntu0.6USN-7599-2
Fixed in:24.0+dfsg-1ubuntu1.2USN-7599-2
python-urllib3Ubuntu
Fixed in:1.13.1-2ubuntu0.16.04.4+esm3USN-7599-1
Fixed in:1.22-1ubuntu0.18.04.2+esm3USN-7599-1
Fixed in:1.25.8-2ubuntu0.4+esm1USN-7599-1
Fixed in:1.26.5-1~exp1ubuntu0.3USN-7599-1
Fixed in:2.0.7-1ubuntu0.2USN-7599-1
python3-pipUbuntu
Fixed in:22.0.2+dfsg-1ubuntu0.6USN-7599-2
Fixed in:24.0+dfsg-1ubuntu1.2USN-7599-2
python3-urllib3Ubuntu
Fixed in:1.13.1-2ubuntu0.16.04.4+esm3USN-7599-1
Fixed in:1.22-1ubuntu0.18.04.2+esm3USN-7599-1
Fixed in:1.25.8-2ubuntu0.4+esm1USN-7599-1
Fixed in:1.26.5-1~exp1ubuntu0.3USN-7599-1
Fixed in:2.0.7-1ubuntu0.2USN-7599-1
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploit Intelligence
0.40%probability of exploitation in 30 days
32ndpercentile
Low risk: more likely to be exploited than 32% of all known CVEs.
References
Related Vulnerabilities
Other CWE-601 (Open Redirect) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2025-4123 | High | 7.6 | 98% | - | Fix |
| CVE-2018-11784 | Medium | 4.3 | 94% | - | Fix |
| CVE-2021-22881 | Medium | 6.1 | 87% | - | Fix |
| CVE-2022-45402 | Medium | 6.1 | 82% | - | Fix |
| CVE-2017-1000117 | High | 8.8 | 78% | - | Fix |
| CVE-2019-10098 | Medium | 6.1 | 74% | - | Fix |
Embed a live status badge for CVE-2025-50181
Markdown
[](https://tridentstack.com/cve/CVE-2025-50181)HTML
<a href="https://tridentstack.com/cve/CVE-2025-50181"><img src="https://tridentstack.com/cve/badge/CVE-2025-50181.svg" alt="CVE-2025-50181"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-12-22.