CVE-2023-6507

An issue was found in CPython 3.12.0 `subprocess` module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the `extra_groups=` parameter with an empty list as a value (ie `extra_groups=[]`) the logic regressed to not call `setgroups(0, NULL)` before calling `exec()`, thus not dropping the original processes' groups before starting the new process. There is no issue when the parameter isn't used or when any value is used besides an empty list. This issue only impacts CPython processes run with sufficient privilege to make the `setgroups` system call (typically `root`).

• CWE-269

• https://github.com/python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82b
• https://github.com/python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06
• https://github.com/python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610
• https://github.com/python/cpython/issues/112334Issue Tracking, Patch
• https://mail.python.org/archives/list/security-announce@python.org/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/Third Party Advisory
• https://github.com/python/cpython/commit/10e9bb13b8dcaa414645b9bd10718d8f7179e82b
• https://github.com/python/cpython/commit/85bbfa8a4bbdbb61a3a84fbd7cb29a4096ab8a06
• https://github.com/python/cpython/commit/9fe7655c6ce0b8e9adc229daf681b6d30e6b1610
• https://github.com/python/cpython/issues/112334Issue Tracking, Patch
• https://mail.python.org/archives/list/security-announce@python.org/thread/AUL7QFHBLILGISS7U63B47AYSSGJJQZD/Third Party Advisory

Published

Dec 8, 2023

Last Modified

Jul 31, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6501The Splashscreen WordPress plugin through 0.20 does not have…4.3
• CVE-2023-6502A Denial of Service (DoS) condition has been discovered in G…6.5
• CVE-2023-6503The WP Plugin Lister WordPress plugin through 2.1.0 does not…5.4
• CVE-2023-6504The User Profile Builder – Beautiful User Registration Forms…4.3
• CVE-2023-6505The Migrate WordPress Website & Backups WordPress plugin bef…7.5
• CVE-2023-6506The WP 2FA – Two-factor authentication for WordPress plugin …4.3
• CVE-2023-6508Use after free in Media Stream in Google Chrome prior to 120…8.8
• CVE-2023-6509Use after free in Side Panel Search in Google Chrome prior t…8.8
• CVE-2023-6510Use after free in Media Capture in Google Chrome prior to 12…8.8
• CVE-2023-6511Inappropriate implementation in Autofill in Google Chrome pr…4.3
• CVE-2023-6512Inappropriate implementation in Web Browser UI in Google Chr…6.5
• CVE-2023-6514 The Bluetooth module of some Huawei Smart Screen products h…8.8