PyPI/pyload-ng CVE-2026-41133: high 8.8, EPSS 0.33%

pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-66hx-chf7-3332
• https://github.com/pyload/pyload/security/advisories/GHSA-66hx-chf7-3332
• https://nvd.nist.gov/vuln/detail/CVE-2026-41133
• https://github.com/pyload/pyload/commit/e95804fb0d06cbb07d2ba380fc494d9ff89b68c1
• https://github.com/pyload/pyload

CVE-2026-41133 · published 2026-04-14T23:38:35Z · modified 2026-07-13T16:42:54.687684300Z · JSON