VULNERABILITY INTELLIGENCE

CVE-2026-2297

CVSS score5.7 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-08-13
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Description

The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.

Weakness classification

  • CWE-668: Exposure of Resource to Wrong Sphere

Primary references