High severity · published Apr 24, 2026
CVE-2026-41066
lxml: Default configuration of iterparse() and ETCompatXMLParser() allows XXE to local files
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input to read local files. Setting the resolve_entities option explicitly to resolve_entities='internal' or resolve_entities=False disables the local file access. This vulnerability is fixed in 6.1.0.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LX
lxml · lxml
< 6.1.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-41066
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-41066
Exploit
https://bugs.launchpad.net/lxml/+bug/2146291
Mitigation
https://github.com/lxml/lxml/security/advisories/GHSA-vfmq-68hx-4jfw
More from lxml
8.2
CVE-2026-49825
lxml: javascript: URL bypass in Cleaner via xlink:href
7.5
CVE-2022-2309
NULL Pointer Dereference allows attackers to cause a denial of service (or application crash)
7.1
CVE-2021-43818
lxml is a library for processing XML and HTML in the Python language
6.1
CVE-2021-28957
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3
6.1
CVE-2020-27783
A XSS vulnerability was discovered in python-lxml's clean module