PT-2026-26196 · Pyspector · Pyspector

Shinigami81

·

Published

2026-03-18

·

Updated

2026-04-28

·

CVE-2026-33139

CVSS v4.0

8.3

High

VectorAV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions PySpector versions 0.1.6 and prior
Description PySpector, a static analysis security testing framework for Python development, is affected by a security validation bypass in its plugin system. The validate plugin code() function in plugin system.py is designed to block dangerous API calls before a plugin is executed. However, the resolve name() helper function only handles ast.Name and ast.Attribute node types, failing to recognize other node types like ast.Call. This allows plugins to bypass the security check by using indirect function calls via getattr() (for example, getattr(os, 'system')). Consequently, a malicious plugin can execute arbitrary system commands on the user's machine when loaded. An attacker who can deliver a malicious plugin file to a PySpector user and convince them to install it can achieve arbitrary code execution on the user's local machine. Exploitation requires the victim to explicitly run pyspector plugin install --trust on the malicious file. Once the plugin is trusted and executed, an attacker can gain full read/write access to the local filesystem, exfiltrate sensitive data, establish persistence mechanisms, and potentially move laterally in CI/CD environments.
Recommendations Versions prior to 0.1.7 are affected. Update PySpector to version 0.1.7 or later.

Fix

Incomplete List of Disallowed Inputs

Weakness Enumeration

CWE-184

Related Identifiers

CVE-2026-33139
GHSA-V3XV-8VC3-H2M6

Affected Products

Pyspector