Analysis Bypass in Tencent's AI-Infra-Guard Product Due to Excluded Python Bytecode

CVE-2026-84809

What is CVE-2026-84809?

The skill-scan component of Tencent AI-Infra-Guard has a vulnerability that allows attackers to bypass security analysis by excluding certain files from scrutiny. Specifically, the exclusion of compiled Python bytecode files—specifically located in __pycache__ directories with extensions .pyc, .pyo, and .pyd—facilitates the covert injection of malicious code. Attackers can package harmful compiled bytecode alongside harmless-looking Python source files, leading to unauthorized code execution during the skill installation process. As a result, the scanner may incorrectly indicate safety, allowing malicious actors to exploit this oversight and potentially compromise systems.

References