CVE-2022-35861

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-17 · updated 2026-06-17
Weakness: CWE-22

Description

pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working directory. An attacker can craft a Python version string in .python-version to execute shims under their control. (Shims are executables that pass a command along to a specific version of pyenv. The version string is used to construct the path to the command, and there is no validation of whether the version specified is a valid version. Thus, relative path traversal can occur.)

Affected products

pyenv: from 1.2.24 through 2.3.2

References

https://github.com/pyenv/pyenv/commit/22fa683571d98b59ea16e5fe48ac411c67939653
https://github.com/pyenv/pyenv/commit/22fa683571d98b59ea16e5fe48ac411c67939653

Get alerted when CVE-2022-35861 or the next vulnerability affects your stack