Directory Shadowing Vulnerability in pymanager by Python
CVE-2026-5271

5.6MEDIUM

What is CVE-2026-5271?

The pymanager application by Python introduces a vulnerability due to the inclusion of the current working directory in sys.path. This design flaw allows for the potential shadowing of Python modules, where malicious or unintended modules in the current working directory can override legitimate ones. Consequently, this could lead to unforeseen behavior and potential exploitation of the application, emphasizing the need for careful management of module paths in Python applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

pymanager 26.0 < 26.1

References

CVSS V4

Score:
5.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Steve Dower
LAKSHMIKANTHAN K
.