---
id: 6493
title: "[CVE-2026-12003] Python Software Foundation - Python 3.11.0a3 to 3.15.0b2"
cve: CVE-2026-12003
cvss: 5.3
severity: medium
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/python-software-foundation-python-3-11-0a3-to-3-15-0b2"
published_at: "2026-08-06T00:00:00Z"
tags: ["privilege-escalation", "windows", "python", "vulnerability", "bishop-fox", "cve-2026-12003"]
phying_url: "https://phying.com/item/6493"
lang: en
---

# [CVE-2026-12003] Python Software Foundation - Python 3.11.0a3 to 3.15.0b2

## Summary

Bishop Fox discloses CVE-2026-12003, a Windows-only CPython path-construction flaw letting a low-privilege user hijack execution when a privileged account runs Python; fixed in 3.13.15, 3.14.7 and 3.15.0b3.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2026-12003
- **CVSS:** 5.3
- **Published:** 2026-08-06T00:00:00Z
- **Original:** https://bishopfox.com/blog/python-software-foundation-python-3-11-0a3-to-3-15-0b2
- **Phying News:** https://phying.com/item/6493