CISCO: Reference: Cisco Security Advisory (CVE-2026-20032)

CISCO Security Advisory

Published Date: Not specified

CVE: CVE-2026-20032

Advisory Summary

📅 October 7, 2026

🏷️ 🔐 NX-OS Python Sandbox Escape (Authenticated, Low-Privileged)
Cisco discloses a Medium-severity vulnerability in the Python interpreter within Cisco NX-OS Software that can allow an authenticated local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system.

• Root cause: insufficient validation of user-supplied input in specific Python interpreter functions
• Impact: sandbox escape → arbitrary command execution on the device OS under the privileges of the authenticated user
• CVE: CVE-2026-20032
• Exploit prerequisites: attacker must have Python execution privileges

• Any environment enabling NX-OS programmability with Python (automation, APIs, scripts, integrations) may increase exposure if an attacker can obtain valid credentials with Python execution capability.
• Because the attacker ends up at OS command execution with the authenticated user’s rights, lateral movement and persistence are credible follow-on risks.

• Restrict who/what can obtain Python execution privileges
• Enforce strong RBAC/least privilege; remove unnecessary programmable capabilities from low-privileged roles.
• Audit installed scripts/integrations that execute Python
• Reduce exposure of functions that process user-controlled input.
• Watch for unusual Python execution activity and unexpected system-level command patterns tied to the same session/user context.

🔎

-OS -2026-20032

Reference: Vendor Advisory