CPython Vulnerabilities Allow File Manipulation and DoS

CERT-Bund has released security advisory WID-SEC-2026-0741 detailing multiple vulnerabilities in CPython versions earlier than 3.15.0. These flaws, with a CVSS Base Score of 7.1, allow authenticated remote attackers to manipulate files or induce a denial-of-service (DoS) state. The advisory applies to UNIX and Windows operating systems.

Organizations utilizing affected CPython versions should review the provided mitigation strategies to address these security risks. While no specific compliance deadline is mentioned, prompt action is recommended to prevent potential file manipulation or service disruptions. The advisory highlights the need for timely patching and security updates for open-source software components.