CVE-2026-5713Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be used to read and write addresses in a privileged process if that process connected to a malicious or "infected" Python process via the remote debugging feature. This vulnerability requires persistently and repeatedly connecting to the process to be exploited, even after the connecting process crashes with high likelihood due to ASLR.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-121CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-19); latest day: 1
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-04-15: 1Mentions · 2026-04-19: 2Mentions · 2026-05-23: 1Patch / Workaround · 2026-05-23: 1Technical Details · 2026-04-15: 1Technical Details · 2026-04-19: 104-1504-1905-23
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-151
Disclosure1
2026-04-192
Disclosure1General1
2026-05-231
Patch1
Full discourse4 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-5713: CPython: Out-of-bounds read/write during remote debugging when connecting to malicious target https://www.openwall.com/lists/oss-security/2026/04/15/6 Medium severity

    Post summary

    The text announces CVE-2026-5713, describing an out-of-bounds read/write flaw in CPython’s remote debugging feature, without presenting a PoC, exploit code, or active exploitation evidence.

    00020388
    4.6K followersView on X
  • Rob Savoury@RobSavoury
    Patch

    Latest Python 3.14.5 release (including fixes for CVE-2026-1502, CVE-2026-4786, and CVE-2026-5713) is now available to #SavOS PPA users of #Ubuntu #Linux at ppa:savoury1/python-3.14 (https://launchpad.net/~savoury1/+archive/ubuntu/python-3.14) for all PPA supported LTS releases.

    Post summary

    Python 3.14.5 has been released with fixes for CVE-2026-1502, CVE-2026-4786, and CVE-2026-5713, and the update is available to Ubuntu users through the SavOS PPA.

    0000075
    46 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5713 The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be… https://www.cve.org/CVERecord?id=CVE-2026-5713 ----- Traducción: CVE-2026-5713 Las… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑5713, describes its impact on specific Python 3.15+ modules, and provides a reference link, but offers no PoC, exploit code, or patch information.

    0000035
    72 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5713 The "profiling.sampling" module (Python 3.15+) and "asyncio introspection capabilities" (3.14+, "python -m asyncio ps" and "python -m asyncio pstree") features could be… https://www.cve.org/CVERecord?id=CVE-2026-5713

    Post summary

    The post merely references CVE‑2026‑5713 with a link, offering no actionable information about exploitation, patches, or technical specifics.

    00000166
    57.2K followersView on X

Explore more