EUVD-2026-43336Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network, unauthenticated path traversal, but exploitation requires the app to ingest and process a crafted email (attack requirement) so AC:H; arbitrary write to importable files yields full C/I/A impact.
Primary rating from Vendor (THA-PSIRT).
CVSS VectorVendor: THA-PSIRT
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files-including Python modules, configuration files, cron inputs, and runtime artifacts-leading to a persistent denial of service, the potential compromise of application secrets or integrations, and root-level execution inside the Django application container. This vulnerability has been names "Matryoshka Mail". Thales PSIRT acknowledges and thanks
Lucien Doustaly (aka wlayzz) for discovering and reporting this issue.
Articles & Coverage 1
AnalysisAI
Remote unauthenticated code execution in Thales CERT's "Suspicious" email-analysis application (versions 1.3.4 and earlier), dubbed "Matryoshka Mail," lets an attacker abuse path traversal in attachment handling to overwrite writable application files-Python modules, configuration, cron inputs, and runtime artifacts-yielding root-level execution inside the Django container. Because the affected code runs Python and processes attacker-supplied mail, overwriting an imported module effectively converts arbitrary file write into RCE, plus persistent denial of service and possible exposure of application secrets and integrations. No public exploit identified at time of analysis and the issue is not in CISA KEV, but it carries a CVSS 4.0 base score of 9.2 and vendor-credited discovery by Lucien Doustaly (wlayzz).
Technical ContextAI
The affected asset is Thales CERT's open-source "Suspicious" tool (CPE cpe:2.3:a:thales_cert:suspicious), a Django-based Python application used to triage/analyze suspicious emails and their attachments. The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / path traversal): user-influenced filenames or paths from ingested mail are used to write files without proper canonicalization, letting the attacker escape the intended storage directory. Because the runtime is Python/Django, an arbitrary write over an importable .py module, settings/config file, cron input, or other loaded artifact is not merely data corruption-it becomes code execution the next time that file is imported or run, and the container reportedly executes as root, so the write lands with maximum privilege inside the app boundary.
RemediationAI
No exact fixed version is included in the provided data, so consult and apply the remediation in the vendor advisory GHSA-x85x-9mrm-wwvp (https://github.com/thalesgroup-cert/suspicious/security/advisories/GHSA-x85x-9mrm-wwvp) and upgrade beyond 1.3.4 to the patched release referenced there. Until patched, apply compensating controls: run the container as a non-root, read-only-filesystem user so an arbitrary write cannot overwrite Python modules, config, or cron inputs (trade-off: may break features that expect writable paths and requires testing); mount application code, configuration, and cron directories read-only while keeping only a dedicated tmp/quarantine path writable; and restrict network reachability of the ingestion endpoint to trusted mail-gateway sources only, so untrusted senders cannot deliver crafted messages directly (trade-off: does not stop a hostile email that transits your legitimate mail flow, since the tool's job is to analyze such mail). Also rotate any application secrets, API keys, and integration credentials that may have been exposed, and monitor the writable directories for unexpected file modifications.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-22 – Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today