CVE-2026-34203 | Nautobot up to 2.4.29/3.0.9 REST API nautobot_config.py weak password (GHSA-xmpv-j7p2-j873)

A vulnerability classified as critical was found in Nautobot up to 2.4.29/3.0.9. This affects an unknown function of the file nautobot_config.py of the component REST API. Such manipulation leads to weak password requirements.

This vulnerability is traded as CVE-2026-34203. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.