CVE-2026-123806

python-tuf is a Python reference implementation of The Update Framework TUF. Prior to 7.0.0, DelegatedRole.istargetinpathpattern in tuf/api/payload.py uses fnmatch.fnmatch, which applies os.path.normcase before matching and makes delegation path authorization case-insensitive on Windows. When a T...