CVE-2026-5713
Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target
- Published
- Updated
- Reserved
- Assigned by
- PSF
Description
The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be exploited, even after the connecting process crashes with high likelihood due to ASLR.
Timeline
ID reserved
By PSF
- 8 days later
· 8 days later
Published
- 4 months later
· 4 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| PSFCNA (assigner) | 4.0 | Medium5.3 | CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
| NVDNVD · Awaiting Analysis | 4.0 | Medium5.3 | CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 0.13% · top 97% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.3.
Weakness
Affected products
Python Software Foundation · CPython
- affected < 3.14.5
- affected 3.15.0a1 – < 3.15.0b1
References (6)
- https://github.com/python/cpython/pull/148187 (opens in a new tab)patch
- https://github.com/python/cpython/issues/148178 (opens in a new tab)issue-tracking
- https://mail.python.org/archives/list/[email protected]/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/ (opens in a new tab)vendor-advisory
- https://github.com/python/cpython/commit/289fd2c97a7e5aecb8b69f94f5e838ccfeee7e67 (opens in a new tab)patch
- https://github.com/python/cpython/commit/316f6265b7f9ca4ffed5346b747475ef1943f35d (opens in a new tab)patch
- http://www.openwall.com/lists/oss-security/2026/04/15/6 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-5713)Record last updated .