Perspective CVE-2026-67195

The PolarsVirtualServer backend must be running and reachable by the attacker over the network - this backend specifically handles expression evaluation via protobuf API (TableValidateExprReq or TableMakeViewReq message types). The CVSS 4.0 vector specifies PR:L, meaning at minimum a low-privilege session or credential is required; however, the CVE description explicitly states 'unauthenticated attackers,' creating a direct conflict that is unresolved from available data - authentication requirements must be verified with the vendor. Exploitation is version-specific: only Perspective 0 through 5.0.0. Limiting factors: the PolarsVirtualServer must be in use (not all Perspective deployments use this backend); the PR:L discrepancy may mean that some authentication barrier exists in default configurations; and scope change is absent (SC:N/SI:N/SA:N) meaning lateral movement to adjacent systems is not directly enabled by this vulnerability alone.

The CVSS 4.0 score of 8.7 reflects a high-severity, network-accessible (AV:N), low-complexity (AC:L), no-user-interaction (UI:N) vulnerability with full impact on the vulnerable system's confidentiality, integrity, and availability. A critical discrepancy exists between the CVE description - which characterizes attackers as 'unauthenticated' - and the CVSS 4.0 vector, which specifies PR:L (low-privilege access required); defenders must verify authentication requirements with the vendor before assessing true exposure. No CISA KEV listing is identified at time of analysis, so active widespread exploitation is not confirmed. However, the publicly available PoC published by the researcher at christbowel.com dramatically elevates real-world risk: the Python subclass traversal technique is elementary and well-documented, meaning the PoC requires minimal adaptation. The attack is conditionally automatable - if the PR:L barrier proves low or absent in practice, mass scanning and exploitation becomes feasible. This is a genuine high-priority remediation candidate, not a CVSS-inflated theoretical risk, particularly for any internet-exposed Perspective deployment.

An attacker with low-privilege access to a Perspective 5.0.0 server sends a crafted protobuf TableValidateExprReq message containing a Python expression that walks the interpreter's loaded subclass list (e.g., ''.__class__.__mro__[1].__subclasses__()) to locate subprocess.Popen, then calls it with an arbitrary OS command. Because __builtins__={} does not block class attribute traversal, the server's PolarsVirtualServer evaluates the payload and executes the command in the context of the Perspective host process. A public PoC demonstrating this exact technique is available at the researcher's blog, requiring minimal attacker skill to operationalize.