CyberRota Analysis
AI-GeneratedRestrictedPython versions prior to 8.4 are vulnerable to a sandbox escape that allows restricted code to access sensitive functions and objects, potentially compromising the confidentiality, integrity, and availability of the host environment. This vulnerability arises when a custom import policy or globals expose the standard library's string module, enabling unauthorized access to function globals and code execution primitives. Organizations using RestrictedPython for input handling in trusted environments should prioritize upgrading to version 8.4 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a trusted environment. Prior to 8.4, RestrictedPython could allow a sandbox escape when a custom import policy or globals exposed the standard library string module, the string.Formatter class, a Formatter instance, or a Formatter subclass to restricted code. The string.Formatter methods format, get_field, get_value, and vformat performed attribute and item traversal internally without passing through RestrictedPython's safer_getattr protections. Restricted code could use those live object references to reach function globals, builtins, file access, or code execution primitives, affecting confidentiality, integrity, and availability in the host environment. This issue is fixed in version 8.4.