CVE-2026-2297: Cpython Missing Sourcelessfileloader

Omitting SourcelessFileLoader from the isinstance check leads to audit hook evasion for legacy .pyc files.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-2297-cpython-missing-sourcelessfileloader --engine opengrep

Description

Omitting SourcelessFileLoader from the isinstance check leads to audit hook evasion for legacy .pyc files.