Python Path Traversal Vulnerability Disclosed

CERT-Bund Security Advisories

Published March 18th, 2026

Detected March 19th, 2026

Summary

CERT-Bund has disclosed a path traversal vulnerability in Python versions prior to 3.15.0. The vulnerability, with a CVSS base score of 4.0, allows local attackers to exploit the flaw. Mitigation is available.

View original document View source feed page

What changed

CERT-Bund has issued a security advisory (WID-SEC-2026-0791) detailing a path traversal vulnerability affecting Open Source Python CPython versions prior to 3.15.0. The vulnerability, rated with a CVSS base score of 4.0 (medium), can be exploited by a local attacker. The advisory indicates that mitigation measures are available.

Organizations utilizing Python versions prior to 3.15.0, particularly those running on Linux, MacOS X, UNIX, or Windows, should review the advisory and implement available mitigations to address the path traversal risk. While the vulnerability requires local access, it could be a component of a larger attack chain. Further information and specific CVE details are referenced in the advisory.

What to do next

Review CERT-Bund advisory WID-SEC-2026-0791 for affected Python versions.
Implement available mitigation measures for path traversal vulnerabilities.
Assess potential impact on systems running vulnerable Python versions.

Source document (simplified)

[WID-SEC-2026-0791] Python: Schwachstelle ermöglicht Path Traversal CVSS Base Score 4.0 (mittel) CVSS Temporal Score 3.5 (niedrig) Remoteangriff nein Datum 18.03.2026 Stand 19.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

Linux
MacOS X
Sonstiges
UNIX
Windows

Produktbeschreibung

Python ist eine universelle, üblicherweise interpretierte, höhere Programmiersprache.

Produkte

18.03.2026
- Open Source Python CPython <3.15.0

Angriff

Ein lokaler Angreifer kann eine Schwachstelle in Python ausnutzen, um einen Path-Traversal Angriff durchzuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben