CVE-2022-26488

CVE-2022-26488 is a local privilege escalation vulnerability affecting Python on Windows, specifically versions through 3.7.12, 3.8.12, 3.9.10, and 3.10.2. It allows a local attacker to add user-writable directories to the system search path, enabling search-path hijacking of other users and system services. The CVSS score is 7.0 (HIGH), indicating a local attack vector with high impact on confidentiality, integrity, and availability, but requiring low privileges and high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.