pyinstaller vulnerabilities

Latest pyinstaller CVEs

Newest publication first

1. CVE-2025-59042 PyInstaller has local privilege escalation vulnerability

   Published 2025-09-09

   High·CVSS 7.0 EPSS 0.13%

   PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an optional module for b...

2. CVE-2023-49797 Local Privilege Escalation in pyinstaller on Windows

   Published 2023-12-09

   High·CVSS 7.8 EPSS 0.32%

   PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A us...

3. CVE-2019-16784 Local Privilege Escalation present only on the Windows version of PyInstaller

   Published 2020-01-14

   High·CVSS 7.8 EPSS 0.70%

   In PyInstaller before version 3.6, only on Windows, a local privilege escalation vulnerability is present in this particular case: If a software using PyInstaller in "onefile" mode is launched by a privileged user (at least more than the current one) which have his "TempPath" res...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.