Exploit for XML Injection (aka Blind XPath Injection) in Fonttools

🗓️ 07 Apr 2026 13:43:38Reported by jwsly12Type

githubexploit

githubexploit🔗 github.com👁 144 Views

XML injection exploit in font tools enables remote code execution via crafted designspace file.

Reporter	Title	Published	Views	Family All 63
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	21 Mar 202616:36	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	16 Mar 202610:43	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	28 Mar 202608:04	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	17 Mar 202620:03	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	16 Mar 202622:57	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	15 Mar 202614:16	–	githubexploit
GithubExploit	Exploit for XML Injection (aka Blind XPath Injection) in Fonttools	15 Mar 202614:16	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection Component uses fontTools dependency which is vulnerable to CVE-2025-66034.	17 Mar 202611:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses werkzeug-3.1.3,fonttools-4.60.0-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.whl,lodash.clonedeep-4.5.0.tgz,js-yaml-4.1.0.tgz,mdast-util-towhich is vulnerable to multiple CVEs	30 Jan 202605:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an XML Injection in fonttools [CVE-2025-66034]	27 Feb 202615:45	–	ibm

07 Apr 2026 13:59Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.3 - 9.8

EPSS0.00496

SSVC

font tools xml processing designspace file remote code execution php shell arbitrary file write path traversal webroot write varia type font