Cisco Security Advisory
Follow
Cisco NX-OS Software Python Sandbox Escape Vulnerability
A vulnerability has been identified in Cisco NX-OS Software's Python interpreter. This flaw allows a local attacker who is already authenticated and has low privileges to break out of the Python sandbox. The vulnerability stems from inadequate validation of user-provided input within the interpreter. By manipulating certain Python functions, an attacker can achieve this escape. A successful exploit would grant the attacker the ability to run unauthorized commands on the device's operating system. Crucially, the attacker must possess Python execution privileges to exploit this vulnerability. Cisco has released software updates that resolve this security issue. There are currently no alternative workarounds available to mitigate this vulnerability. The security impact of this vulnerability has been rated as Medium. This specific vulnerability is tracked under CVE-2026-20032.