CVE-2002-1119: os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which co...

Security readout for executives and security teams

This is an old Python flaw where affected versions could create temporary files with predictable names. A local user on the same system could abuse that behavior to make Python run unintended code. The risk is mainly to legacy servers or appliances still running Python 2.2.1 or earlier. Exposure is most likely on very old Linux or Unix systems, embedded appliances, or unsupported applications that still include Python 2.2.1 or earlier. Modern Python deployments are unlikely to be affected, but legacy vendor images should be checked directly. Prioritize this when legacy Python exists on shared systems or regulated environments. For modern estates, this is usually a legacy hygiene issue. The business action is inventory, upgrade or retire, and reduce local-user exposure. Mitigation focus: Identify and remove Python 2.2.1 or earlier where possible.; Apply corrected Python packages from relevant vendor advisories.; Isolate or retire systems that cannot be upgraded..

Prepared

Jun 30, 2026, 06:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.