BugZero | Cisco BugID CSCwi52461 - Cisco NX-OS Software Python Parser Escape Vulnerab...

Cisco - Defect ID: CSCwi52461

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco - Defect ID: CSCwi52461

Cisco NX-OS Software Python Parser Escape Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Description

Symptom

Multiple vulnerabilities in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by manipulating specific functions within the Python interpreter. A successful exploit could allow an attacker to escape the Python sandbox and execute arbitrary commands on the underlying operating system with the privileges of the authenticated user. Note: An attacker must be authenticated with Python execution privileges to exploit these vulnerabilities. For more information regarding Python execution privileges, see product-specific documentation, such as the Cisco NX-OS Security with Python section of the Cisco Nexus 9000 Series NX-OS Programmability Guide. The Cisco Product Security Incident Response Team (PSIRT) validates only the affected and fixed release information that is documented in this advisory. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-psbe-ce-YvbTn5du

Conditions

Please refer to the Security Advisory.

Workaround

Please refer to the Security Advisory.

Further Problem Description

Please refer to the Security Advisory.

PSIRT Evaluation

The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 5.3: https://sec.cloudapps.cisco.com/security/center/cvssCalculator.x?vector=CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE ID CVE-2024-20286 has been assigned to document this issue. Information about Fixed, Vulnerable, and Non-vulnerable releases--as well as information about fixed release availability--is not maintained by Cisco PSIRT. Please refer to the appropriate fields in this bug. If you require additional help to obtain this information, please open a support case with your support organization. Additional information on Cisco's security vulnerability policy can be found at the following URL: https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html

Change history

2025-12-05 Added: 6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(10), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.2(9), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5), 8.4(6), 8.4(6a), 8.4(7), 8.4(8), 8.4(9)

Relevant Products

Click on a version to see all relevant bugs

Affected versions:6.2(10), 6.2(12), 6.2(14), 6.2(16), 6.2(18), 6.2(2), 6.2(20), 6.2(20a), 6.2(22), 6.2(24), 6.2(24a), 6.2(2a), 6.2(6), 6.2(6a), 6.2(6b), 6.2(8), 6.2(8a), 6.2(8b), 7.2(0)D1(1), 7.2(1)D1(1), 7.2(2)D1(1), 7.2(2)D1(2), 7.3(0)D1(1), 7.3(0)DX(1), 7.3(1)D1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3(3)D1(1), 7.3(4)D1(1), 7.3(5)D1(1), 7.3(6)D1(1), 7.3(7)D1(1), 7.3(8)D1(1), 7.3(9)D1(1), 8.0(1), 8.1(1), 8.1(2), 8.1(2a), 8.2(1), 8.2(10), 8.2(2), 8.2(3), 8.2(4), 8.2(5), 8.2(6), 8.2(7), 8.2(7a), 8.2(8), 8.2(9), 8.3(1), 8.3(2), 8.4(1), 8.4(2), 8.4(3), 8.4(4), 8.4(4a), 8.4(5), 8.4(6), 8.4(6a), 8.4(7), 8.4(8), 8.4(9)

Fixed versions: 8.2(11), 8.4(10), 8.4(11), 8.4(12), 8.4(13)

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 8.2(11), 8.4(10), 8.4(11), 8.4(12), 8.4(13)

Top Cisco Defects

9.7Defect ID: CSCvx82406
Memory leaks in IOS_PRIV_OPER_DB
9.7Defect ID: CSCwf37271
cnssdaemon.log fills up flash partition 2, preventing AP upgrades
9.7Defect ID: CSCwi93213
9800 WLC marked "AAA Server Down" after switchover when using key 6 password encryption
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.

Ready to prevent the next vendor outage?

Get a demo

Cisco - Defect ID: CSCwi52461

Cisco NX-OS Software Python Parser Escape Vulnerability

Cisco - Defect ID: CSCwi52461

Cisco NX-OS Software Python Parser Escape Vulnerability

Last updated on February 21st, 2026

BugZero Risk Score6.1 Medium

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

PSIRT Evaluation

Top Cisco Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.1 Medium