CVE-2026-5271

Name of the Vulnerable Software and Affected Versions pymanager (affected versions not specified)

Description pymanager included the current working directory in its sys.path, allowing modules in the current working directory to shadow intended packages. If a user runs a pymanager-generated command (like pip or pytest) from a directory controlled by an attacker, a malicious module in that directory could be imported and executed instead of the legitimate package.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.