CVE-2026-70667 | Netflix Lemur up to 1.9.2 Certificate Verification verify.py _validate_revocation_url race condition

August 18, 2026 Yanac

A vulnerability marked as problematic has been reported in Netflix Lemur up to 1.9.2. This affects the function _validate_revocation_url of the file lemur/certificates/verify.py of the component Certificate Verification. This manipulation causes race condition.

This vulnerability is tracked as CVE-2026-70667. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More