A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the… (CVE-2026-20032)

CVE-2026-20032 describes a vulnerability in the Python interpreter component of Cisco NX-OS Software. An authenticated local attacker with low privileges can exploit insufficient input validation to escape the Python sandbox environment. This escape enables the attacker to execute arbitrary commands on the underlying operating system with the same privileges as the authenticated user. The vulnerability does not require user interaction and has a low attack complexity. It impacts confidentiality and integrity but not availability.

Successful exploitation allows an authenticated local attacker with low privileges to bypass the Python sandbox restrictions and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. This could lead to unauthorized access to system resources and potential compromise of system integrity and confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided. Until a patch is available, restrict local access to trusted users and monitor for suspicious activity related to Python interpreter usage.