CPython: [CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
oss-sec: CPython: [CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
Posted by Alan Coopersmith on Nov 09 -------- Forwarded Message --------
Subject: [Security-announce][CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain
but never the identity
Date: Mon, 9 Nov 2026 14:12:16 +0000
From: Seth Larson <seth () python org>
Reply-To: security-sig () python org
To: security-announce () python org
There is a LOW severity vulnerability affecting CPython.
When ca_certs parameter was supplied to...
seclists.org
November 9, 2026 at 7:39 PM
CPython: [CVE-2026-19552] ssl.get_server_certificate(addr, ca_certs=...) verifies the chain but never the identity
Node is nodejs-mobile, with each run in its own worker thread and its own virtual cwd. Python is embedded CPython, with stdout, env and cwd routed per run. Ruby and PHP run as WebAssembly in a hidden WebView, because that's the only place iOS allows it.
November 9, 2026 at 6:42 PM
Node is nodejs-mobile, with each run in its own worker thread and its own virtual cwd. Python is embedded CPython, with stdout, env and cwd routed per run. Ruby and PHP run as WebAssembly in a hidden WebView, because that's the only place iOS allows it.
Next time pip or uv prints a wall of wheel file names, read the tags.
cp312 means built for Python 3.12 only. cp313t means built for the free-threaded build of 3.13.
Python 3.15 adds a new tag, and it changes how much one wheel can cover.
realpython.com/podcasts/pre...
cp312 means built for Python 3.12 only. cp313t means built for the free-threaded build of 3.13.
Python 3.15 adds a new tag, and it changes how much one wheel can cover.
realpython.com/podcasts/pre...
Episode #318: Free-Threaded Python: Why Python Devs Should Know About the ABI – The Real Python Podcast
Why should every Python developer know about the CPython ABI? This week on the show, we speak with Nathan Goldbaum about free-threaded Python and the changes to the Python Application Binary…
realpython.com
November 9, 2026 at 6:30 PM
Next time pip or uv prints a wall of wheel file names, read the tags.
cp312 means built for Python 3.12 only. cp313t means built for the free-threaded build of 3.13.
Python 3.15 adds a new tag, and it changes how much one wheel can cover.
realpython.com/podcasts/pre...
cp312 means built for Python 3.12 only. cp313t means built for the free-threaded build of 3.13.
Python 3.15 adds a new tag, and it changes how much one wheel can cover.
realpython.com/podcasts/pre...
Nathan Goldbaum found his people in open source as a grad student. Now he helps the whole Python community move to free-threading. Hear his story on The Real Python Podcast 🎧
realpython.com/podcasts/rpp...
#Python #OpenSource
realpython.com/podcasts/rpp...
#Python #OpenSource
Episode #318: Free-Threaded Python: Why Python Devs Should Know About the ABI – The Real Python Podcast
Why should every Python developer know about the CPython ABI? This week on the show, we speak with Nathan Goldbaum about free-threaded Python and the changes to the Python Application Binary Interface...
realpython.com
November 9, 2026 at 5:55 PM
Nathan Goldbaum found his people in open source as a grad student. Now he helps the whole Python community move to free-threading. Hear his story on The Real Python Podcast 🎧
realpython.com/podcasts/rpp...
#Python #OpenSource
realpython.com/podcasts/rpp...
#Python #OpenSource
One attacker's AI agent mesh hits Taiwan's emergency dispatch, plus a CPython sandbox escape for model hosts
Acronis traced the attacker through his own server, RunSybil broke the Jinja sandbox, and Monday's research roundup.
https://aisec.guru/blog/2026-11-09
Acronis traced the attacker through his own server, RunSybil broke the Jinja sandbox, and Monday's research roundup.
https://aisec.guru/blog/2026-11-09
One attacker's AI agent mesh hits Taiwan's emergency dispatch, plus a CPython sandbox escape for model hosts
Acronis traced the attacker through his own server, RunSybil broke the Jinja sandbox, and Monday's research roundup.
aisec.guru
November 9, 2026 at 2:04 PM
One attacker's AI agent mesh hits Taiwan's emergency dispatch, plus a CPython sandbox escape for model hosts
Acronis traced the attacker through his own server, RunSybil broke the Jinja sandbox, and Monday's research roundup.
https://aisec.guru/blog/2026-11-09
Acronis traced the attacker through his own server, RunSybil broke the Jinja sandbox, and Monday's research roundup.
https://aisec.guru/blog/2026-11-09
** Speaker announcement ** @emmatyping.dev, Python Core Developer and Senior Systems Software Engineer at NVIDIA, is speaking at RustWeek 2027 about 'Rust for CPython'!
Info & Tickets: 2027.rustweek.org/talks/emma/
PS Want to join Emma in our line-up? The CfP is still open!
#rustlang #RustWeek2027
Info & Tickets: 2027.rustweek.org/talks/emma/
PS Want to join Emma in our line-up? The CfP is still open!
#rustlang #RustWeek2027
November 9, 2026 at 1:04 PM
** Speaker announcement ** @emmatyping.dev, Python Core Developer and Senior Systems Software Engineer at NVIDIA, is speaking at RustWeek 2027 about 'Rust for CPython'!
Info & Tickets: 2027.rustweek.org/talks/emma/
PS Want to join Emma in our line-up? The CfP is still open!
#rustlang #RustWeek2027
Info & Tickets: 2027.rustweek.org/talks/emma/
PS Want to join Emma in our line-up? The CfP is still open!
#rustlang #RustWeek2027
CPython native JIT: PEP 836 withdrawn 19 Oct. Authors' 4–12%; adaptive interpreter (3.11+) stays. Not speed hype — missing maintenance plan. #Python #TechnicalDebt
www.infoworld.com/article/4241...
www.infoworld.com/article/4241...
November 9, 2026 at 12:02 PM
CPython native JIT: PEP 836 withdrawn 19 Oct. Authors' 4–12%; adaptive interpreter (3.11+) stays. Not speed hype — missing maintenance plan. #Python #TechnicalDebt
www.infoworld.com/article/4241...
www.infoworld.com/article/4241...
CPython flaw exposes AI inference servers to sandbox escape attacks www.csoonline.com/article/4245...
CPython flaw exposes AI inference servers to sandbox escape attacks
RunSybil demonstrated code execution through a malicious model template. Python says the sandbox escapes fall outside its security threat model.
www.csoonline.com
November 9, 2026 at 11:42 AM
CPython flaw exposes AI inference servers to sandbox escape attacks www.csoonline.com/article/4245...
冷鏈系統被駭，法國血液機構冷藏室被調到110度，這不是儲血，是在煮火鍋 🍲 另外 SonicWall 單因素驗證 VPN 又進 KEV，2026 年還在靠一道密碼守城門，勇氣可嘉。AI 模板沙箱逃逸更精彩，CPython 說這只是 bug。 #資安 #KEV #CPython
November 8, 2026 at 10:15 PM
冷鏈系統被駭，法國血液機構冷藏室被調到110度，這不是儲血，是在煮火鍋 🍲 另外 SonicWall 單因素驗證 VPN 又進 KEV，2026 年還在靠一道密碼守城門，勇氣可嘉。AI 模板沙箱逃逸更精彩，CPython 說這只是 bug。 #資安 #KEV #CPython
CPythonの欠陥でAI推論サーバーにサンドボックス脱出攻撃のリスク
RunSybilが、悪意あるモデルテンプレートを介したコード実行を実証。Pythonは、サンドボックス脱出はセキュリティ脅威モデルの対象外だとしている。 RunSybilのセキュリティ研究者によると、CPythonのメモリ
RunSybilが、悪意あるモデルテンプレートを介したコード実行を実証。Pythonは、サンドボックス脱出はセキュリティ脅威モデルの対象外だとしている。 RunSybilのセキュリティ研究者によると、CPythonのメモリ
CPythonの欠陥でAI推論サーバーにサンドボックス脱出攻撃のリスク
RunSybilが、悪意あるモデルテンプレートを介したコード実行を実証。Pythonは、サンドボックス脱出はセキュリティ脅威モデルの対象外だとしている。 RunSybilのセキュリティ研究者によると、CPythonのメモリ
blackhatnews.tokyo
November 7, 2026 at 8:43 PM
CPythonの欠陥でAI推論サーバーにサンドボックス脱出攻撃のリスク
RunSybilが、悪意あるモデルテンプレートを介したコード実行を実証。Pythonは、サンドボックス脱出はセキュリティ脅威モデルの対象外だとしている。 RunSybilのセキュリティ研究者によると、CPythonのメモリ
RunSybilが、悪意あるモデルテンプレートを介したコード実行を実証。Pythonは、サンドボックス脱出はセキュリティ脅威モデルの対象外だとしている。 RunSybilのセキュリティ研究者によると、CPythonのメモリ
Someone stored SHA-256 hashes in a NumPy array and got broken hashes back.
NumPy's old bytes type can't tell a trailing null byte from the end of the string, so those bytes were stripped.
Nathan Goldbaum explains what he wants to add to NumPy to fix it.
realpython.com/podcasts/pre...
NumPy's old bytes type can't tell a trailing null byte from the end of the string, so those bytes were stripped.
Nathan Goldbaum explains what he wants to add to NumPy to fix it.
realpython.com/podcasts/pre...
Episode #318: Free-Threaded Python: Why Python Devs Should Know About the ABI – The Real Python Podcast
Why should every Python developer know about the CPython ABI? This week on the show, we speak with Nathan Goldbaum about free-threaded Python and the changes to the Python Application Binary…
realpython.com
November 7, 2026 at 5:02 PM
Someone stored SHA-256 hashes in a NumPy array and got broken hashes back.
NumPy's old bytes type can't tell a trailing null byte from the end of the string, so those bytes were stripped.
Nathan Goldbaum explains what he wants to add to NumPy to fix it.
realpython.com/podcasts/pre...
NumPy's old bytes type can't tell a trailing null byte from the end of the string, so those bytes were stripped.
Nathan Goldbaum explains what he wants to add to NumPy to fix it.
realpython.com/podcasts/pre...
The recurring mistakes bit is what I want to hear more about. Do skills actually stick across sessions, or does each fresh agent rediscover the same one? Curious what the CPython folks saw in practice.
November 7, 2026 at 9:43 AM
The recurring mistakes bit is what I want to hear more about. Do skills actually stick across sessions, or does each fresh agent rediscover the same one? Curious what the CPython folks saw in practice.
CPython 0-Day Vulnerabilities Threaten the AI Supply Chain #appsec
CPython 0-Day Vulnerabilities Threaten the AI Supply Chain
Groups
Sign in
CPython 0-Day Vulnerabilities Threaten the AI Supply Chain
0 views
Eyal Estrin
unread,
1:28 AM
to
https://www.runsybil.com/blog/cpython-0-day-vulnerabilities-threaten-the-ai-supply-chain
Eyal Estrin
Author | Cloud Architect | AWS • Azure • GCP Insights
Social: @eyalestrin
Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com
dlvr.it
November 7, 2026 at 8:38 AM
CPython 0-Day Vulnerabilities Threaten the AI Supply Chain #appsec
CPython flaw exposes AI inference servers to sandbox escape attacks
Researchers at RunSybil have found a memory-safety flaw in CPython that lets a malicious AI model template escape code sandboxes and execute arbitrary code... https://threatintel.cc/2026/11/06/cpython-flaw-exposes-ai-inference.html
Researchers at RunSybil have found a memory-safety flaw in CPython that lets a malicious AI model template escape code sandboxes and execute arbitrary code... https://threatintel.cc/2026/11/06/cpython-flaw-exposes-ai-inference.html
November 7, 2026 at 2:59 AM
CPython flaw exposes AI inference servers to sandbox escape attacks
Researchers at RunSybil have found a memory-safety flaw in CPython that lets a malicious AI model template escape code sandboxes and execute arbitrary code... https://threatintel.cc/2026/11/06/cpython-flaw-exposes-ai-inference.html
Researchers at RunSybil have found a memory-safety flaw in CPython that lets a malicious AI model template escape code sandboxes and execute arbitrary code... https://threatintel.cc/2026/11/06/cpython-flaw-exposes-ai-inference.html
Core Dispatch #12 is out!
Three new core devs. Two new triagers. Sixteen Python releases in October (we planned five).
Plus snake_pit for testing CPython against popular packages, a proposal for better perf tooling and benchmarks, and a quick JIT update.
👇👇👇
coredispatch.xyz/editions/12/
Three new core devs. Two new triagers. Sixteen Python releases in October (we planned five).
Plus snake_pit for testing CPython against popular packages, a proposal for better perf tooling and benchmarks, and a quick JIT update.
👇👇👇
coredispatch.xyz/editions/12/
Core Dispatch #12
Welcome back to Core Dispatch! This edition covers October 9 through November 6, 2026. Python 3.16.0 alpha 1 is out, with alpha 2 due this Tuesday, November…
coredispatch.xyz
November 7, 2026 at 12:24 AM
Core Dispatch #12 is out!
Three new core devs. Two new triagers. Sixteen Python releases in October (we planned five).
Plus snake_pit for testing CPython against popular packages, a proposal for better perf tooling and benchmarks, and a quick JIT update.
👇👇👇
coredispatch.xyz/editions/12/
Three new core devs. Two new triagers. Sixteen Python releases in October (we planned five).
Plus snake_pit for testing CPython against popular packages, a proposal for better perf tooling and benchmarks, and a quick JIT update.
👇👇👇
coredispatch.xyz/editions/12/
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
oss-sec: [oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
Posted by Alan Coopersmith on Nov 06 -------- Forwarded Message --------
Subject: [Security-announce][CVE-2026-119170] Regression in FIPS enforcement of
hash algorithms affecting only Python 3.14.10
Date: Fri, 6 Nov 2026 14:45:25 +0000
From: Seth Larson <seth () python org>
Reply-To: security-sig () python org
To: security-announce () python org
There is a HIGH severity vulnerability affecting CPython.
There was a regression in how FIPS algorithms were...
seclists.org
November 6, 2026 at 10:09 PM
[oss-security][CVE-2026-119170] Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
Stock CPython on the left, the other one on the right, and the tail latency drops like a sounding line going off the shelf. Python 3.12 and 3.14 both show the same slope, p99 pauses cut from forty-some milliseconds down to four. Deese would have pulled the bad readings and asked which way the curre…
November 6, 2026 at 10:01 PM
Stock CPython on the left, the other one on the right, and the tail latency drops like a sounding line going off the shelf. Python 3.12 and 3.14 both show the same slope, p99 pauses cut from forty-some milliseconds down to four. Deese would have pulled the bad readings and asked which way the curre…
Python 3.15's new stable ABI is meant to let one wheel run on both the free-threaded and the regular GIL build, and on newer versions too.
Nathan Goldbaum, now a CPython core developer, explains the change to PyObject behind it.
realpython.com/podcasts/pre...
Nathan Goldbaum, now a CPython core developer, explains the change to PyObject behind it.
realpython.com/podcasts/pre...
Episode #318: Free-Threaded Python: Why Python Devs Should Know About the ABI – The Real Python Podcast
Why should every Python developer know about the CPython ABI? This week on the show, we speak with Nathan Goldbaum about free-threaded Python and the changes to the Python Application Binary…
realpython.com
November 6, 2026 at 4:03 PM
Python 3.15's new stable ABI is meant to let one wheel run on both the free-threaded and the regular GIL build, and on newer versions too.
Nathan Goldbaum, now a CPython core developer, explains the change to PyObject behind it.
realpython.com/podcasts/pre...
Nathan Goldbaum, now a CPython core developer, explains the change to PyObject behind it.
realpython.com/podcasts/pre...
A CPython typing-cache bug let a backdoored chat template run code inside a Jinja sandbox. Python 3.12, what Ubuntu 24.04 LTS ships, has no public fix.
https://www.fosslinux.com/163590/cpython-sandbox-escape-ai-supply-chain.htm
#FOSSLinux #Linux
https://www.fosslinux.com/163590/cpython-sandbox-escape-ai-supply-chain.htm
#FOSSLinux #Linux
November 6, 2026 at 2:30 PM
A CPython typing-cache bug let a backdoored chat template run code inside a Jinja sandbox. Python 3.12, what Ubuntu 24.04 LTS ships, has no public fix.
https://www.fosslinux.com/163590/cpython-sandbox-escape-ai-supply-chain.htm
#FOSSLinux #Linux
https://www.fosslinux.com/163590/cpython-sandbox-escape-ai-supply-chain.htm
#FOSSLinux #Linux
CPython memory bug lets poisoned model templates escape AI inference sandboxes
RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.
https://aisec.guru/blog/2026-11-06
RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.
https://aisec.guru/blog/2026-11-06
CPython memory bug lets poisoned model templates escape AI inference sandboxes
RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.
aisec.guru
November 6, 2026 at 2:13 PM
CPython memory bug lets poisoned model templates escape AI inference sandboxes
RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.
https://aisec.guru/blog/2026-11-06
RunSybil shows a Jinja chat-template breakout on vLLM-class hosts, Check Point bypasses ChatGPT Lockdown Mode, OpenAI ships GPT-6 Cyber, and a Railway engineer's agents probe a rival.
https://aisec.guru/blog/2026-11-06
A CPython bug lets an AI model escape its sandbox and run code on the server. RunSybil reported it, but for many installations the fix may never arrive.
A CPython flaw lets AI models escape their sandbox
A CPython bug lets an AI model escape its sandbox and run code on the server. RunSybil reported it, but for many installations the fix may never arrive.
www.alextech.ai
November 6, 2026 at 2:04 PM
A CPython bug lets an AI model escape its sandbox and run code on the server. RunSybil reported it, but for many installations the fix may never arrive.
A CPython memory-safety flaw may let malicious model templates escape code sandboxes and run arbitrary code on AI inference servers.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
November 6, 2026 at 11:45 AM
A CPython memory-safety flaw may let malicious model templates escape code sandboxes and run arbitrary code on AI inference servers.
A CPython memory-safety flaw may let malicious model templates escape code sandboxes and run arbitrary code on AI inference servers.
Save What Matters
Curate Feeds | Make Collections | Customize Email Briefs
briefly.co
November 6, 2026 at 11:45 AM
A CPython memory-safety flaw may let malicious model templates escape code sandboxes and run arbitrary code on AI inference servers.