CVE-2026-0864EPSS p2.0%
CVE-2026-0864CVE-2026-0864
python / python
Description
When using the "configparser" module to write configuration files
containing multi-line text values with carriage return characters (\r) the
resulting file could be injected with unexpected keys and values if the
attacker controls the written value.
Scoring
| CVSS | 5.5 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
| EPSS | 0.13% probability of exploitation · percentile 2.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-18 |