TI-2026-29825 Aliases CVE-2026-41206 GHSA-vp22-38m5-r39r

PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code

HIGH 66CWE-184Published 2026-04-23 · Updated 2026-04-23

Key facts

Attack vector: Local
Privileges required: Low
User interaction: Active
Attack complexity: Low
Attack requirements: None
Impact type: —
Confidentiality · integrity · availability: High · High · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows. The plugin security validator in PySpector uses AST-based static analysis to prevent dangerous code from being loaded as plugins. Prior to version 0.1.8, the blocklist implemented in `PluginSecurity.validate_plugin_code` is incomplete and can be bypassed using several Python constructs that are not checked. An attacker who can supply a plugin file can achieve arbitrary code execution within the PySpector process when that plugin is installed and executed. Version 0.1.8 fixes the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00185 8th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed PySpector (ParzivalHack): 0.1.8pyspector (PyPI): 0.1.8

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ParzivalHack	PySpector	before 0.1.8	0.1.8	Patch available	CNA
—	pyspector (PyPI)	before 0.1.8	0.1.8	Patch available	GHSA-vp22-38m5-r39r

PySpector VendorParzivalHack Affected before 0.1.8 Fixed in 0.1.8 Patch available CNA
pyspector (PyPI) Vendor— Affected before 0.1.8 Fixed in 0.1.8 Patch available GHSA-vp22-38m5-r39r

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:parzivalhack:pyspector::::::python::*	before 0.1.8	Vulnerable	ParzivalHack

cpe:2.3:a:parzivalhack:pyspector:*:*:*:*:*:python:*:* Versions before 0.1.8 Vulnerable ·ParzivalHack

Remediation

Fix · CNA PySpector (ParzivalHack) Fixed in 0.1.8
Fix · GHSA-vp22-38m5-r39r pyspector (PyPI) Fixed in 0.1.8 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-41206
2026-10-03 Alias added: GHSA-vp22-38m5-r39r

References

Exploit 1

https://github.com/ParzivalHack/PySpector/security/advisories/GHSA-vp22-38m5-r39r

Patch 2

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-41206

Other 1

https://github.com/ParzivalHack/PySpector

TI-2026-25569 PySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution CVSS 4.0HIGH 8.3
TI-2026-25570 PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences