Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2025-10284

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

VectorNETWORK

PublishedOct 09, 2025, 16:15

Published Bycves@blacklanternsecurity.com

Base Score

Score9.6

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

bbot(PyPI)02.7.0N/A

References

https://blog.blacklanternsecurity.com/p/bbot-security-advisory-gitdumper

Weakness Type

CWE-22

CVSS Metrics

Base Score

9.6

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK