On 30 June 2026, the Python security team released a bulletin (TWZW2PC2AZOV6FENIHFSRC63OM7MBGSB) reporting a vulnerability in CPython that enables attackers to bypass the language’s security policy. The flaw is present in any CPython installation that does not include the latest security patch. The vulnerability is identified as CVE-2026-4360. The issue may allow malicious code to evade normal security controls, potentially leading to unauthorized operations. The Python Security Advisory recommends that users consult the official bulletin for the latest patches and update their CPython installations accordingly. The French national cybersecurity agency has highlighted the risk of policy circumvention in affected systems. Up-to-date versions should mitigate the vulnerability.
Summary of content from
Made by AI. If you spot anything of concern write us at contact@cybach.com. We’ll promptly correct irregularities.