PT-2026-57606 · Pypi · Strix

·

CVE-2026-15519

·

Published

2026-07-13

·

Updated

2026-07-13

CVSS v2.0

5.1

Medium

VectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions usestrix strix versions prior to 1.0.3
Description A remote issue exists in the PyPI Handler component within the system prompt.jinja file. Manipulation of this component allows the inclusion of functionality from an untrusted control sphere. The attack is complex and difficult to execute.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-15519

Affected Products

Strix