The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.
RCE
Python
Python Gnupg
Python Gnupg Project
NVD
CVSS 2.0
7.5
EPSS
0.7%