Directory Shadowing Vulnerability in pymanager by Python

CVE-2026-5271

What is CVE-2026-5271?

The pymanager application by Python introduces a vulnerability due to the inclusion of the current working directory in sys.path. This design flaw allows for the potential shadowing of Python modules, where malicious or unintended modules in the current working directory can override legitimate ones. Consequently, this could lead to unforeseen behavior and potential exploitation of the application, emphasizing the need for careful management of module paths in Python applications.

References