PT-2026-26196 · Pyspector · Pyspector

Shinigami81

·

Publicado

2026-03-18

·

Atualizado

2026-04-28

·

CVE-2026-33139

CVSS v4.0

8.3

Alta

VetorAV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions PySpector versions 0.1.6 and prior
Description PySpector, a static analysis security testing framework for Python development, is affected by a security validation bypass in its plugin system. The validate plugin code() function in plugin system.py is designed to block dangerous API calls before a plugin is executed. However, the resolve name() helper function only handles ast.Name and ast.Attribute node types, failing to recognize other node types like ast.Call. This allows plugins to bypass the security check by using indirect function calls via getattr() (for example, getattr(os, 'system')). Consequently, a malicious plugin can execute arbitrary system commands on the user's machine when loaded. An attacker who can deliver a malicious plugin file to a PySpector user and convince them to install it can achieve arbitrary code execution on the user's local machine. Exploitation requires the victim to explicitly run pyspector plugin install --trust on the malicious file. Once the plugin is trusted and executed, an attacker can gain full read/write access to the local filesystem, exfiltrate sensitive data, establish persistence mechanisms, and potentially move laterally in CI/CD environments.
Recommendations Versions prior to 0.1.7 are affected. Update PySpector to version 0.1.7 or later.

Correção

Incomplete List of Disallowed Inputs

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2026-33139
GHSA-V3XV-8VC3-H2M6

Produtos afetados

Pyspector