Security issues in python39.dll

Development Platform & Builds
, ,
1

Unreal Engine 5.3 depends/ships python39.dll when USD import plugin is included into a project.

python39.dll has known security issues.

Do you have a plan or recommendations to replace python39.dll with a newer version of Python (e.g. 3.11) where the issue is fixed?

2

Steps to Reproduce
Please see Python Python 3.9.7 security vulnerabilities, CVEs

3

USD Import depends on OpenUSD, OpenUSD depends on Python39.dll

4

Python39.dll ships with a game that includes USD Import Plugin.

5

Hi Igor, we aim to follow the VFX Reference platform (https://vfxplatform.com/). Unreal 5.4 and up are on Python 3.11. In 2026, we’ll be moving the next UE release to Python 3.13 as per the 2026 VFX Reference platform.

If you need to stay on UE 5.3, I believe you could try and grab the Python 3.11 SDK from UE 5.4 or higher.