CVE-2026-39888: Python Exec Unrestricted Builtins Sandbox
A globals mapping is being constructed with '__builtins__' aliased to the unrestricted real __builtins__. When this mapping is passed to exec()/eval() for untrusted code, it provides NO sandboxing: the executed code can call exec/eval/compile/__import__/open directly, and can also escape via frame-traversal (e.__traceback__.tb_frame.f_back.f_builtins["exec"]
Pythongreprules fetch cve-2026-39888-python-exec-unrestricted-builtins-sandbox --engine opengrepDescription
A globals mapping is being constructed with '__builtins__' aliased to the unrestricted real __builtins__. When this mapping is passed to exec()/eval() for untrusted code, it provides NO sandboxing: the executed code can call exec/eval/compile/__import__/open directly, and can also escape via frame-traversal (e.__traceback__.tb_frame.f_back.f_builtins["exec"]
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.