CVE-2019-16328: Rpyc Project Rpyc

High severity, CVSS 7.5. EPSS: 13% chance of exploitation in the next 30 days.

In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings.

Affected products

• Rpyc Project Rpyc: from 4.1.0, up to and including 4.1.1

Published 2019-10-03. Last modified 2026-06-17.