CVE-2026-2297
Improper Audit Handling in CPython SourcelessFileLoader Module
Publication date: 2026-03-04
Last updated on: 2026-05-01
Assigner: Python Software Foundation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| python | python | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-668 | The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability be detected on my network or system? Can you suggest some commands?
I don't know
Can you explain this vulnerability to me?
This vulnerability involves the import hook in CPython that handles legacy .pyc files, specifically the SourcelessFileLoader. The issue is that the FileLoader base class does not use io.open_code() to read .pyc files as it should. Because of this, sys.audit handlers for the related audit event do not get triggered.
How can this vulnerability impact me? :
The impact of this vulnerability is that audit events related to loading legacy .pyc files are not fired. This means that security monitoring or auditing tools relying on sys.audit handlers may not detect or log the loading of these files, potentially allowing malicious or unauthorized code execution to go unnoticed.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
What immediate steps should I take to mitigate this vulnerability?
I don't know