CVE-2023-6507

score

<0.1

cvss

6.1

epss

1.3%

published

2023-12-08

kev added

—

first seen

2026-10-21

CPython 3.12.0's subprocess module on POSIX platforms contains a privilege escalation caused by not dropping original process groups when using 'extra_groups=[]', letting privileged attackers escalate privileges, exploit requires running as root.