CVE-2026-76825— RestrictedPython: Sandbox escape via string.Formatter field resolution
Quick assessment
Affected
zopefoundation RestrictedPython
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
RestrictedPython 是一个用于在可信环境中定义 Python 语言子集以接受程序输入的工具。在 8.4 版本之前，当自定义导入策略或全局变量将标准库中的 模块、 类、 实例或 子类暴露给受限代码时，RestrictedPython 可能出现沙箱逃逸漏洞。 的方法（如 、 、 和 ）在内部进行属性访问和元素遍历，但未经过 RestrictedPython 提供的 安全保护机制。因此，受限代码可以利用这些活动对象引用访问函数全局变量、内置函数、文件访问或代码执行原语，从而影响主机环境的机密性、完整性和可用
Possible ATT&CK Techniques 3 AI
T1059.004 · Unix Shell T1059 · Command and Scripting Interpreter T1059.006 · Python
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-76825
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RestrictedPython: Sandbox escape via string.Formatter field resolution
Source: CVE Program / CVE List V5
Vulnerability Description
RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPython could allow a sandbox escape when a custom import policy or globals exposed the standard library string module, the string.Formatter class, a Formatter instance, or a Formatter subclass to restricted code. The string.Formatter methods format, get_field, get_value, and vformat performed attribute and item traversal internally without passing through RestrictedPython's safer_getattr protections. Restricted code could use those live object references to reach function globals, builtins, file access, or code execution primitives, affecting confidentiality, integrity, and availability in the host environment. This issue is fixed in version 8.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| zopefoundation | RestrictedPython | < 8.4 | - |
|
II. Public POCs for CVE-2026-76825
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-76825
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-76825 (1)
Vendor Advisories for CVE-2026-76825 (1)
Vendor Pages for CVE-2026-76825 (1)
-
🔗 Release 8.4 · zopefoundation/RestrictedPython · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same product: RestrictedPython
-
CVE-2026-55830
RestrictedPython guard hooks can be shadowed via positional- -
CVE-2025-22153
try/except* clauses could allow bypass RestrictedPython via -
CVE-2024-47532
RestrictedPython information leakage via `AttributeError.obj -
CVE-2023-41039
Sandbox escape via various forms of "format" in RestrictedPy -
CVE-2023-37271
RestrictedPython vulnerable to arbitrary code execution via
Same vendor: zopefoundation
-
CVE-2026-77401
Zope AccessControl: Information disclosure through Python st -
CVE-2026-55830
RestrictedPython guard hooks can be shadowed via positional- -
CVE-2025-22153
try/except* clauses could allow bypass RestrictedPython via -
CVE-2024-51734
User data deletion by anoynmous users in Zope -
CVE-2024-47532
RestrictedPython information leakage via `AttributeError.obj
Same weakness: CWE-200
-
CVE-2026-92357
a2ui-project a2ui Model Processor model-processor.ts informa -
CVE-2026-88065
`tts-be` application has a Broken Access Control vulnerabili -
CVE-2026-69212
Http4s: FollowRedirect middleware leaks credentials over htt -
CVE-2026-54689
mcp-searxng hardened-mode SSRF bypasses permit internal URL -
CVE-2026-91992
Tornado before 6.5.7 Credential Leak via Handle Reuse
V. Comments for CVE-2026-76825
No comments yet