Executive brief
try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
Affected products
- PyPI restrictedpython
Junglewise Threat Intelligence
CVE-2025-22153: PYSEC-2026-1874 - try/except* clauses could allow bypass RestrictedPython via type confusion bug in the CPython interpreter
CVE-2025-22153 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: restrictedpython (PyPI). Vendors: PyPI.
Related threats
- Zope RestrictedPython access policy bypass via positional-only arguments
- PYSEC-2024-186 - RestrictedPython is a restricted execution environment for Python to run untrusted code. A user can gain access to protected (and potentiall
- PYSEC-2023-159 - RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone cont
- PYSEC-2023-118 - RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted