VDB
CVE-2026-5713
CVE-2026-5713
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target
EPSS 0.02% · 5.1th percentile
Risk Scores
CVSS 4.0
5.300000190734863
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score
0.02%
5.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | libpython | 3.15.0, 3.15.0 |
| Bitnami | python | 3.15.0 |
| Bitnami | python-min | 3.15.0, 3.15.0 |
Exploit Intelligence
- https://github.com/python/cpython/pull/148187 (circl)
- https://github.com/python/cpython/issues/148178 (circl)
- https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/ (circl)
- https://github.com/python/cpython/commit/289fd2c97a7e5aecb8b69f94f5e838ccfeee7e67 (circl)
- rf-python3.11-dev_advisory.json (github-poc)
- rf-python3.11-dev_advisory.json (github-poc)
- rf-python3.11-dev_advisory.json (github-poc)
- rf-python3.11-dev_advisory.json (github-poc)
- rf-python3.11-dev_advisory.json (github-poc)
- rf-python3.11-dev_advisory.json (github-poc)
…and 1 more exploits
Timeline
- Apr 14, 2026 CVE Published
- Apr 15, 2026 EPSS Score
- Apr 18, 2026 Security Advisory
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- http://www.openwall.com/lists/oss-security/2026/04/15/6 url
- https://github.com/python/cpython/commit/289fd2c97a7e5aecb8b69f94f5e838ccfeee7e67 url
- https://github.com/python/cpython/issues/148178 url
- https://github.com/python/cpython/pull/148187 url
- https://mail.python.org/archives/list/security-announce@python.org/thread/OG4RHARYSNIE22GGOMVMCRH76L5HKPLM/ url
- https://nvd.nist.gov/vuln/detail/CVE-2026-5713 url