Which versions of Perspective are affected by CVE-2026-67195?

Perspective 5.0.0 PolarsVirtualServer backend systems are vulnerable to remote code execution with publicly available exploit code.

Is there a public PoC exploit available for CVE-2026-67195?

Yes, a public proof-of-concept exploit is available for CVE-2026-67195. Prioritise patching immediately. EPSS: 1.2%.

How to fix or mitigate CVE-2026-67195?

Within 24 hours: inventory all Perspective 5.0.0 deployments and immediately implement firewall rules restricting PolarsVirtualServer listener access to authorized administrative networks only; begin monitoring for suspicious activity on affected systems. Within 7 days: if network segmentation is complete, maintain strict access controls and enhanced logging; if PolarsVirtualServer is not operationally critical, disable it entirely. Within 30 days: contact vendor for patch availability timeline; evaluate upgrade paths to newer Perspective versions or alternative products; ensure all backend services run as unprivileged users to limit damage from potential compromise.

Perspective CVE-2026-67195

Q: What is the CVSS score of CVE-2026-67195?

CVE-2026-67195 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 1.2%.

EUVD-2026-52692 HIGH

Eval Injection (CWE-95)

2026-08-04 VulnCheck

GHSA-3jqr-28gj-8vq4

RCE Python Code Injection Perspective

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-delivered eval injection with PR:L per CVSS 4.0 vector (conflicting description claim noted); full CIA impact via OS command execution in host process.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 04, 2026 - 15:25 vuln.today

CVE Published

Aug 04, 2026 - 14:03 cve.org

HIGH 8.7

DescriptionCVE.org

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval() with only __builtins__={} cleared. Attackers can exploit Python object attribute traversal through the interpreter's loaded class list to reach subprocess.Popen via a TableValidateExprReq or TableMakeViewReq protobuf message, achieving arbitrary command execution in the Perspective host process.

AnalysisAI

Remote code execution in Perspective 5.0.0 exposes any network-reachable PolarsVirtualServer backend to arbitrary OS command execution via Python eval() injection. The server passes client-supplied expression strings to eval() with only __builtins__={} cleared - a well-known insufficient sandbox - enabling attackers to traverse Python's loaded class hierarchy to reach subprocess.Popen through crafted TableValidateExprReq or TableMakeViewReq protobuf messages. A public exploit is confirmed by VulnCheck, and five vulnerabilities were disclosed simultaneously in the researcher's blog post, suggesting a broader attack surface in this release. No KEV listing is identified, but the published PoC substantially lowers the exploitation barrier.

Technical ContextAI

Perspective (CPE: cpe:2.3:a:perspective-dev:perspective) is an open-source high-performance data visualization and analytics library whose PolarsVirtualServer backend exposes server-side expression evaluation. The root cause is CWE-95 (Eval Injection): client-supplied expression strings are passed directly to Python's built-in eval() function. The only attempted sandboxing - setting __builtins__={} in the eval context - is a widely documented anti-pattern. Python's runtime object model retains references to all loaded classes via __subclasses__(), allowing an attacker to walk the class hierarchy from any accessible type (e.g., object.__subclasses__()) to locate subprocess.Popen or os.system without requiring any __builtins__ access. The attack is delivered via Google Protocol Buffer (protobuf) messages (TableValidateExprReq or TableMakeViewReq), meaning it targets a structured, purpose-built API endpoint rather than a generic web form. The EUVD entry EUVD-2026-52692 corroborates the affected range as all versions from 0 through 5.0.0 inclusive.

RemediationAI

No vendor-released patched version has been independently confirmed from available data - patch availability must be verified directly with the perspective-dev project repository. As an immediate compensating control, restrict network access to the PolarsVirtualServer's protobuf endpoints (TableValidateExprReq and TableMakeViewReq) to trusted internal networks only; note this disables server-side expression evaluation and may break expression-based analytics features for end users. If expression evaluation cannot be disabled, enforce strict authentication and authorization at the gateway layer so only known trusted users can submit expression payloads. A code-level fix requires replacing eval() with a safe, sandboxed expression parser (e.g., asteval or a restricted grammar parser) - the __builtins__={} approach must not be used as a security control. Monitor https://www.vulncheck.com/advisories/perspective-rce-via-eval-expression-injection for patch release updates. Given that five CVEs were disclosed simultaneously in the researcher's blog, review the full post at https://christbowel.com/blog/perspective-5-0-0-five-cves/ for companion vulnerabilities that may require additional remediation.