A vulnerability in Cisco NX-OS Software’s Python interpreter permits an authenticated local attacker with low privileges to escape the Python sandbox, enabling the execution of arbitrary operating‑system commands with the attacker’s user privileges. The flaw stems from insufficient validation of user‑supplied input, classifying it as CWE‑653.

The issue affects Cisco NX‑OS Software. No specific version information was provided, so all deployments of Cisco NX‑OS Software may be susceptible unless newer releases have addressed the flaw.

The CVSS score is 4.4, indicating a moderate risk level. No EPSS score is available, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires a local, authenticated user with low privileges; the attacker must be able to invoke the Python interpreter on the device. Once accessed, they can escape the sandbox and run arbitrary commands, but the exploit relies on legitimate user access rather than remote exploitation.