Executive brief
Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
Affected products
- PyPI magic-wormhole
Junglewise Threat Intelligence
CVE-2026-32116: PYSEC-2026-2615 - Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
CVE-2026-32116 · Severity: medium · CVSS 4 · Published 2026-07-13
Vendors: PyPI.