What is the CVSS score of CVE-2026-55830?

CVE-2026-55830 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-55830?

Yes, a public proof-of-concept exploit is available for CVE-2026-55830. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-55830?

Yes, a patch is available for CVE-2026-55830. Update the affected software to the latest version immediately.

RestrictedPython CVE-2026-55830

EUVD-2026-42434 HIGH

Incomplete List of Disallowed Inputs (CWE-184)

2026-06-23

GHSA-ffg3-p8fm-mjx2

Authentication Bypass Python

8.3

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

8.3 HIGH

AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:L

vuln.today AI

8.5 HIGH

Network-delivered via web interface; AC:H reflects non-trivial sandbox escape craft; PR:L for required script-authoring role; S:C for full sandbox boundary break.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Patch available

Jul 08, 2026 - 23:04 EUVD

CVSS changed

Jul 08, 2026 - 22:22 NVD

8.3 (HIGH)

Analysis Generated

Jun 23, 2026 - 20:16 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 pypi packages depend on restrictedpython (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 8.3.

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Sandbox escape in RestrictedPython (zopefoundation/RestrictedPython, GHSA-ffg3-p8fm-mjx2) allows an authenticated attacker who can execute code within the restricted Python environment to break out of that sandbox and execute arbitrary Python on the underlying host. This affects Plone deployments that rely on RestrictedPython to safely run through-the-web (TTW) Python Scripts and TALES expressions. Disclosed June 2026 as part of a coordinated Plone security release; no public exploit code or CISA KEV listing identified at time of analysis, but the 8.3 high severity and scope-changing nature make it a meaningful risk for any Zope/Plone installation where untrusted or semi-trusted users can author Python scripts.

Technical ContextAI

RestrictedPython (zopefoundation/RestrictedPython) is a Python library that compiles and executes Python source code in a sandboxed environment by rewriting the AST and intercepting potentially dangerous operations via a restricted builtins dictionary and guard functions. Zope and Plone use it as the execution engine for user-authored 'Script (Python)' objects and TALES Python expressions evaluated server-side. A sandbox escape means that a crafted Python expression or script bypasses the guard functions - commonly achieved through attribute access chains, __class__ traversal, or abuse of Python introspection - and reaches unrestricted interpreter primitives. No CWE was supplied in the input, but this class of vulnerability is consistent with CWE-693 (Protection Mechanism Failure) or CWE-284 (Improper Access Control) at the sandbox boundary. Exact affected RestrictedPython versions are not stated in the provided input; the advisory at GHSA-ffg3-p8fm-mjx2 should be consulted for the precise version range.

RemediationAI

Upgrade RestrictedPython to the patched version identified in the GitHub Security Advisory at https://github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-ffg3-p8fm-mjx2 - the exact fixed version is not confirmed in the provided input and must be read from the advisory directly. For Plone deployments, the coordinated release announced June 23, 2026 via oss-security (https://seclists.org/oss-sec/2026/q2/1009) should be applied in full, as multiple components were patched simultaneously. As a compensating control prior to patching, restrict or remove the 'Add Python Scripts' permission from all non-administrative roles in the Zope/Plone ZMI; this eliminates the attack surface by preventing untrusted users from submitting code for sandbox execution, at the cost of disabling legitimate TTW scripting for those roles. Review existing through-the-web Script (Python) objects for suspicious introspection patterns as a detection measure.