CVE-2026-84811

agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, so it never inspects __pycache__ entries shipped alongside Python source files. An attacker who can place a malicious compiled bytecode file next to benign-looking source files can have arbitrary Python bytecode executed when the code is imported, while the scanner still reports a CERTIFIED verdict with high trust scores in both static and semantic analysis modes. This defeats the tool's core assurance function, letting attacker-supplied code run under the cover of a trusted scan result. Any organization relying on agentverus-scanner to certify Python packages or code directories is affected. No exploitation is known: there is no public proof-of-concept, the issue is not in CISA KEV, and EPSS estimates only a 0.3% chance of exploitation within 30 days.

What to do: Until a patched scanner version is announced, do not rely solely on CERTIFIED verdicts for Python code: inspect companion directories for shipped __pycache__/.pyc entries and recompile bytecode from reviewed source files rather than trusting shipped bytecode. Monitor the vendor's advisory and update agentverus-scanner as soon as a fixed release is published.