CVE-2009-0315: Xchat

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).

Affected products

• Xchat Xchat: any version

Published 2009-01-28. Last modified 2026-06-16.