CVE-2026-123806

A flaw was found in python-tuf. On Windows systems, delegation path pattern matching is performed case-insensitively due to platform-specific path normalization. In repositories with delegation patterns that differ only by letter case, an attacker controlling a delegated role can provide target...