Python Pymanager vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Python Pymanager: 1 record(s), with affected versions and fixes.cpe:2.3:a:python:pymanager
CVE-2026-5271
High · 7.8
CWE-427 Apr 1, 2026
Possible to hijack modules in current working directory
pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory. As a result, if a user executes a pymanager-generated command (e.g., pip, pytest)
from an attacker-controlled directory, a malicious module in that
directory can be imported and executed instead of the intended package.