Logo
vulnerabilityCVE-2026-2297
Name
CVE-2026-2297
Source
NVD ( link)Debian ( link)
Description
The import hook in CPython that handles legacy *.pyc files (SourcelessFileLoader) is incorrectly handled in FileLoader (a base class) and so does not use io.open_code() to read the .pyc files. sys.audit handlers for this audit event therefore do not fire.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
python3
Exploitable

Vulnerability Ratings#


5.7
CVSSv4
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
3.12.14
Exploitable
buildroot
master
3.14.7
Not Affected
openwrt
master
3.14.5-r2
Not Affected
openwrt
openwrt-25.12
3.13.9-r3
Exploitable
yocto
master
3.14.7
Not Affected
yocto
scarthgap
3.12.13
Exploitable