---
id: 4641
title: "Finding and Patching a CPython 0day in Hours: CVE-2026-6100"
cve: CVE-2026-6100
cvss: 9.1
severity: critical
source_domain: theori.io
source_url: "https://theori.io/blog/finding-and-patching-a-cpython-0day-in-hours-cve20266100--157979"
published_at: "2026-04-13 20:44"
tags: ["ai-security", "zero-day", "use-after-free", "patch", "cpython", "cve-2026-6100", "tarfile"]
phying_url: "https://phying.com/item/4641"
lang: en
---

# Finding and Patching a CPython 0day in Hours: CVE-2026-6100

## Summary

CVE-2026-6100 timeline: Xint Code flagged a critical CPython tarfile flaw within 30 minutes, and Python maintainers patched three compression modules the day after the report.

## Intelligence Metadata

- **Sources:** theori.io
- **CVE:** CVE-2026-6100
- **CVSS:** 9.1
- **Published:** 2026-04-13 20:44
- **Original:** https://theori.io/blog/finding-and-patching-a-cpython-0day-in-hours-cve20266100--157979
- **Phying News:** https://phying.com/item/4641