Changeflow GovPing Vulnerability Alerts CPython Vulnerabilities Allow Remote Code Execu...
Priority review Notice Added Final

CPython Vulnerabilities Allow Remote Code Execution

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published January 25th, 2026
Detected March 13th, 2026
Email

Summary

The German Federal Office for Information Security (BSI) has issued a security advisory regarding multiple vulnerabilities in CPython, with a CVSS base score of 7.7. These vulnerabilities allow remote attackers to manipulate files or execute arbitrary code on affected systems.

View original document View source feed page

What changed

This advisory from the BSI details critical vulnerabilities (CVSS 7.7) in CPython versions prior to 3.15.0, affecting Linux, macOS, UNIX, and Windows operating systems. The vulnerabilities enable authenticated remote attackers to manipulate files or execute arbitrary code, posing a significant security risk.

Organizations utilizing CPython should immediately review their installed versions and apply available updates or mitigations. The advisory lists specific product updates for various Linux distributions, including RESF Rocky Linux, Amazon Linux 2, SUSE Linux, Red Hat Enterprise Linux, Ubuntu Linux, Oracle Linux, Fedora Linux, and SUSE openSUSE. Failure to address these vulnerabilities could lead to system compromise and data breaches.

What to do next

  1. Review CPython version for installations prior to 3.15.0
  2. Apply available updates or mitigations for affected systems
  3. Consult specific product update information for Linux distributions

Source document (simplified)

[WID-SEC-2026-0209] Cpython: Mehrere Schwachstellen CVSS Base Score 7.7 (hoch) CVSS Temporal Score 6.7 (mittel) Remoteangriff ja Datum 25.01.2026 Stand UPDATE 13.03.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • Linux
  • MacOS X
  • Sonstiges
  • UNIX
  • Windows

Produktbeschreibung

Python ist eine universelle, üblicherweise interpretierte, höhere Programmiersprache.

Produkte

UPDATE 10.03.2026
- RESF Rocky Linux
UPDATE 05.03.2026
- Amazon Linux 2
UPDATE 22.02.2026
- SUSE Linux
UPDATE 05.02.2026
- Red Hat Enterprise Linux

  • Ubuntu Linux

  • Oracle Linux
    UPDATE 03.02.2026

  • Fedora Linux
    UPDATE 01.02.2026

  • SUSE openSUSE
    25.01.2026

  • Open Source Python CPython <3.15.0

Angriff

Angriff

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cpython ausnutzen, um Dateien zu manipulieren oder beliebigen Code auszuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for www.gov.uk Humanitarian Assistance Exception Notification for Petroleum Products
Priority review Mar 13, 2026 • OFSI All Publications • Trade & Export
Favicon for www.apra.gov.au APRA Releases Quarterly ADI Statistics for December 2025
Routine Mar 13, 2026 • news-and-publications • Government
Favicon for www.apra.gov.au APRA Statement on Gender Pay Gap
Routine Mar 13, 2026 • news-and-publications • Government
Favicon for www.cisa.gov CISA Adds Two Exploited Vulnerabilities to KEV Catalog
Priority review Mar 13, 2026 • CISA ICS-CERT Advisories • Government
Favicon for www.cisa.gov CISA: Ignition Software Vulnerable to Code Execution
Priority review Mar 13, 2026 • CISA ICS-CERT Advisories • Government
Favicon for www.gao.gov GAO Report on DOD Cybersecurity Maturity Model Certification Program
Priority review Mar 13, 2026 • GAO Reports & Testimonies • Government Accountability

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Vulnerability Alerts
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
Various
Published
January 25th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Technology companies
Geographic scope
INT

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Topics
Software Vulnerabilities Remote Code Execution

Browse Categories

Federal Courts 26 State Courts 91 Securities Regulation 6 Financial Regulation 43 Consumer Protection 5 Drug Safety 45 Data Protection 21 Competition 2 Attorneys General 3 Insurance Regulation 5 Trade & Export 36 Legislation 42 Energy Regulation 13 Environment 3 Labor & Employment 2 Tax 1

Get Vulnerability Alerts alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.