ZDI-CAN-26008 HIGH 7.3 Overdue Jan 08, 2025

IPython

IPython is a popular interactive computing environment widely used by data scientists and developers for Python development. The vulnerability has a high severity rating (7.3) and requires local access with user-level privileges to exploit, but once triggered it can compromise system confidentiality, integrity, and availability. Security teams should monitor for any suspicious local activity on systems running IPython and prepare patching plans ahead of the May 2025 vendor deadline.

Advisory Details
Researcher Discovered by: Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative
Reported January 08, 2025
Deadline May 08, 2025 343d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy