The vulnerability of the Python programming language interpreter, related to improper restriction of the path to a limited directory, allows attackers to gain access and modify any arbitrary file in the system.

🗓️ 29 Sep 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Python interpreter flaw from improper path restrictions allows remote file access and modification.

Reporter	Title	Published	Views	Family All 302
IBM Security Bulletins	Security Bulletin: AIX/VIOS is affected by arbitrary code execution (CVE-2025-47273, CVE-2025-4330, CVE-2024-12718, CVE-2025-4138, CVE-2025-4517) due to Python	20 Aug 202515:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc packages shipped with IBM CICS TX Advanced.	12 Aug 202511:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	21 Oct 202514:44	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc packages shipped with IBM CICS TX Standard.	12 Aug 202511:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities discovered in RedHat UBI as shipped with IBM Security Verify Directory Server Container	8 Aug 202517:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	31 Jul 202514:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a path traversal in Python [CVE-2024-12718]	17 Dec 202514:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities due to libxml2, python3 and pam packages shipped with TXSeries for Multiplatforms.	12 Aug 202511:41	–	ibm
GithubExploit	Exploit for CVE-2025-4138	15 Feb 202608:28	–	githubexploit
ATTACKERKB	CVE-2024-12718	3 Jun 202513:15	–	attackerkb

Vulners

Node

OR

novell suse_linux_enterprise_high_performance_computingMatch12

novell suse_linux_enterprise_microMatch5.1

novell suse_linux_enterprise_microMatch5.2

novell suse_manager_retail_branch_serverMatch4.3

novell suse_manager_proxyMatch4.3

novell suse_manager_serverMatch4.3

novell suse_linux_enterprise_microMatch5.3

novell suse_linux_enterprise_microMatch5.4

novell suse_linux_enterprise_microMatch5.5

python pythonMatch3.12

red_hat red_hat_enterprise_linuxMatch8

novell opensuse_leapMatch15.6

fedora fedoraMatch42

canonical ubuntuMatch25.04

red_hat red_hat_enterprise_linuxMatch10

novell suse_linux_microMatch6.0

novell suse_linux_microMatch6.1

Source	Link
github	www.github.com/python/cpython/issues/127987
github	www.github.com/python/cpython/issues/135034
github	www.github.com/python/cpython/pull/135037
redos	www.redos.red-soft.ru/support/secure/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-12718
access	www.access.redhat.com/security/cve/cve-2024-12718
ubuntu	www.ubuntu.com/security/CVE-2024-12718
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2023-9d033517d4
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2024-82a696ca59
bodhi	www.bodhi.fedoraproject.org/updates/FEDORA-2025-3436f3d2b4

19 Nov 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

CVSS 35.3

EPSS0.00663

Python interpreter path restrictions limited directory remote attacker access files modify files