ZDI-CAN-26008
HIGH 7.3
Overdue
Jan 08, 2025
IPython
IPython is a popular interactive computing environment widely used by data scientists and developers for Python development. The vulnerability has a high severity rating (7.3) and requires local access with user-level privileges to exploit, but once triggered it can compromise system confidentiality, integrity, and availability. Security teams should monitor for any suspicious local activity on systems running IPython and prepare patching plans ahead of the May 2025 vendor deadline.
Advisory Details
Researcher
Discovered by:
Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative
Reported
January 08, 2025
Deadline
May 08, 2025
343d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H