PT-2026-40059 · Pysyft · Pysyft

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-31220

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PySyft (Syft Datasite/Server) versions prior to 0.9.6

Description Insufficient validation and sandboxing of user-submitted code allow remote code execution. Low-privileged users can submit Python functions via @sy.syft function() for remote execution on the server. Although a code approval mechanism is present, the submitted code is not checked for dangerous operations such as file access or command execution. Once approved, the code is executed within the server process using exec() and eval() functions without proper isolation, enabling a remote attacker to execute arbitrary Python code and completely compromise the server environment.

Recommendations Update to a version later than 0.9.5. As a temporary workaround, restrict the use of the @sy.syft function() function to trusted users only.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-31220

GHSA-CFPG-C974-JFHQ

Affected Products

Pysyft

References · 4

• https://osv.dev/vulnerability/GHSA-cfpg-c974-jfhq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31220 · Security Note
• https://github.com/OpenMined/PySyft · Note
• https://notion.so/CVE-2026-31220-35d1e1393188814186b9e00114a8aba7 · Note