CVE-2026-63349 | agronholm AnyIO up to 4.14.1 Subprocess Helper anyio.open_process group input validation

September 18, 2026 Yanac

A vulnerability classified as critical has been found in agronholm AnyIO up to 4.14.1. This affects the function anyio.open_process of the component Subprocess Helper. The manipulation of the argument group leads to improper input validation.

This vulnerability is documented as CVE-2026-63349. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More