Junglewise Threat Intelligence

CVE-2026-33139: PYSEC-2026-3030 - PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

CVE-2026-33139 · Severity: medium · CVSS 4 · Published 2026-07-13

Technologies: pyspector (PyPI). Vendors: PyPI.

Executive brief

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Affected products

PyPI pyspector

Related threats

PYSEC-2026-3029 - Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code