Changeflow GovPing Data Privacy & Cybersecurity Python Vulnerability Allows Security Policy Bypass
Priority review Notice Added Final

Python Vulnerability Allows Security Policy Bypass

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 19th, 2026
Detected March 19th, 2026
Email

Summary

CERT-FR has issued an advisory regarding a vulnerability in Python (CVE-2026-3479) that allows attackers to bypass security policies. The advisory urges users to apply the latest security patches provided by the Python editor.

View original document View source feed page

What changed

CERT-FR has issued an advisory (CERTFR-2026-AVI-0317) concerning a critical vulnerability discovered in Python, identified as CVE-2026-3479. This vulnerability allows an attacker to bypass security policies. The advisory affects CPython installations that have not yet applied the latest security patches.

Organizations utilizing Python should immediately refer to the official Python security bulletin for instructions on obtaining and applying the necessary patches. Failure to do so could result in security policy circumvention, potentially leading to unauthorized access or other security breaches. The advisory emphasizes the need for prompt action to mitigate the risk.

What to do next

  1. Apply the latest security patches for Python as recommended by the editor.
  2. Review security configurations to ensure policy enforcement mechanisms are not compromised.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 19 mars 2026 N° CERTFR-2026-AVI-0317 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans Python

Gestion du document

| Référence | CERTFR-2026-AVI-0317 |
| Titre | Vulnérabilité dans Python |
| Date de la première version | 19 mars 2026 |
| Date de la dernière version | 19 mars 2026 |
| Source(s) | Bulletin de sécurité Python WYLLVQOOCKGK73JM7Z7ZSNOJC4N7BAWY du 18 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Contournement de la politique de sécurité

Systèmes affectés

  • CPython sans le dernier correctif de sécurité

Résumé

Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 19 mars 2026 Version initiale

Named provisions

Risque Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr CERT-FR Advises on Splunk Universal Forwarder Vulnerabilities
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Mitel Products Vulnerability - XSS
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr VMware Product Vulnerabilities Identified by CERT-FR
Priority review Mar 19, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.justice.gov DOJ Seizes Four Domains Used in Iranian Cyber Operations
Urgent Mar 20, 2026 • DOJ News • Courts & Legal
Favicon for www.cisa.gov CISA ICS Advisory: WebCTRL Server Vulnerabilities Allow Communication Interception
Priority review Mar 19, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity
Favicon for www.cisa.gov CISA: IGL-Technologies eParking.fi ICS Advisory
Urgent Mar 19, 2026 • CISA ICS-CERT Advisories • Data Privacy & Cybersecurity

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 19th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0317

Who this affects

Industry sector
5112 Software & Technology
Activity scope
Software Development System Security
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software Security Vulnerability Management

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 211 Consumer Protection 35 Courts & Legal 245 Data Privacy & Cybersecurity 59 Defense & National Security 48 Education 20 Energy 101 Energy & Utilities 1 Environment 82 Government & Legislation 240 Healthcare 116 Housing 15 Immigration 8 Insurance 56 Labor & Employment 110 Pharma & Drug Safety 77 Securities & Markets 73 Tax 49 Telecom & Technology 34 Trade & Sanctions 122 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.