Vulnerability in Beeware Briefcase
CVE-2026-33430
Briefcase is a tool for converting a Python project into a standalone native application. Starting in version 0.3.0 and prior to version 0.3.26, if a developer uses Briefcase to produce an Windows MSI installer for a project, and that proj…
EPSS: 0.000 (0.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Beeware Briefcase — versions >= 0.3.0, < 0.3.26
Weakness classification (CWE)
References
- https://github.com/beeware/briefcase/security/advisories/GHSA-r3r2-35v9-v238 (x_refsource_CONFIRM)
- https://github.com/beeware/briefcase/issues/2759 (x_refsource_MISC)
- https://github.com/beeware/briefcase-windows-VisualStudio-template/pull/85 (x_refsource_MISC)
- https://github.com/beeware/briefcase-windows-app-template/pull/86 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2026-33430?
- CVE-2026-33430 is a high-severity vulnerability in Beeware Briefcase, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.3/10. Published 2026-03-26.
- How severe is CVE-2026-33430?
- High severity. CVSS v3 base score is 7.3 out of 10.