/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-50817

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-50817

Severity

Unknown

Description

A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing