Reddit NetSec

CVE Database V5

AlienVault OTX General

Exploit-DB RSS Feed

Reddit InfoSec News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 2.0.0 is able to address this issue. The patch is named 14b4cae704a0bb4eb6723e238f25382d847a1917. It is recommended to upgrade the affected component.

CVE-2025-5175 is a vulnerability identified in the erdogant pypickle library versions up to 1.1.5, specifically affecting the Save function within the pypickle/pypickle.py file. The core issue is improper authorization, which allows a local attacker with limited privileges (low privileges) to manipulate the Save function in a way that bypasses intended authorization controls. This vulnerability does not require user interaction or elevated privileges beyond local access, making it exploitable by any user with local access to the affected system. The improper authorization flaw could potentially allow unauthorized modification or saving of data, which may impact the integrity and confidentiality of the data managed by pypickle. However, the vulnerability does not affect availability directly, and the scope is limited to local exploitation. The vulnerability has been publicly disclosed, but there are no known exploits actively used in the wild at this time. The vendor has addressed the issue in version 2.0.0, and a patch identified by commit 14b4cae704a0bb4eb6723e238f25382d847a1917 is available. The CVSS v4.0 base score is 4.8, categorized as medium severity, reflecting the limited attack vector (local), low complexity, and low privileges required for exploitation, with partial impact on confidentiality, integrity, and availability.

Detailed information about CVE-2025-5175: Improper Authorization in erdogant pypickle affecting erdogant pypickle. Get real-time updates, technical details, and

Title	Severity	Type	Source	Date

Threats Tagged 'cve-2025-5175'

Filter Threats

Threats Tagged 'cve-2025-5175'