A vulnerability was found in pallets werkzeug up to 3.1.4. It has been classified as problematic. Impacted is an unknown function. Performing a manipulation results in improper handling of windows device names.

This vulnerability is identified as CVE-2026-21860. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.