THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-ffg3-p8fm-mjx2 (high) — RestrictedPython guard hooks can be shadowed via positional-only arguments

[GHSA] GHSA-ffg3-p8fm-mjx2 (high) — RestrictedPython guard hooks can be shadowed via positional-only arguments

medgithub_advisoriesPublished 2026-08-28

GHSA-ffg3-p8fm-mjx2 Severity: high CVE: CVE-2026-55830

RestrictedPython guard hooks can be shadowed via positional-only arguments

### Impact

RestrictedPython rewrites sensitive operations to go through guard hooks. Attribute access becomes `_getattr_(obj, name)`, item access becomes `_getitem_(obj, key)`, writes go through `_write_`, and print goes through `_print_`. The embedding application s

Indicators of compromise

CVE-2026-55830cve

Original source: https://github.com/advisories/GHSA-ffg3-p8fm-mjx2