Untrusted search path in Python - CVE-2022-26488

Vulnerability details

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to the search path being inadequately secured. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services.

Affected software

How to mitigate CVE-2022-26488

Links to Public Exploits and PoC-codes

• Exploit #9248 - PyPATHPwner (POC Exploit for CVE-2022-26488 - Python for Windows (CPython) escalation of privilege vulnerability, discovered by the Lockheed Martin Red Team.) (August 17, 2023)

External References

• https://mail.python.org/archives/list/security-announce@python.org/thread/657Z4XULWZNIY5FRP3OWXHYKUSIH6DMN/
• https://security.netapp.com/advisory/ntap-20220419-0005/

Related Security Bulletins

• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Untrusted search path in IBM Monitor Component