CVE-2026-84811 — agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache_…
Published: 2026-09-02 · CVSS: 7.1 · CVSS 4.0
agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, allowing attackers to bypass security scanning by shipping malicious __pycache__ entries alongside benign source files. Attackers can execute arbitrary Python bytecode on import while the scanner reports a CERTIFIED verdict with high trust scores in both static and semantic analysis modes.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7