Cisco NX-OS Python sandbox escape (CVE-2026-20032) lets low-privileged local users run OS commands
Cisco disclosed CVE-2026-20032, a Medium-rated vulnerability in the Python interpreter of Cisco NX-OS Software. An authenticated local attacker with low privileges and Python execution rights can escape the Python sandbox and reach the underlying operating system of the device. The flaw stems from insufficient validation of user-supplied …