CVE Intelligence

Python Pymanager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Python Pymanager: 1 record(s), with affected versions and fixes.
cpe:2.3:a:python:pymanager

CVE-2026-5271 High · 7.8 CWE-427 Apr 1, 2026
Possible to hijack modules in current working directory
pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory. As a result, if a user executes a pymanager-generated command (e.g., pip, pytest) from an attacker-controlled directory, a malicious module in that directory can be imported and executed instead of the intended package.