CVE-2025-5321mediumCWE-264CWE-265

CVE-2025-5321: fallo de gravedad media en aimhubio aim

aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear aim+ Monitorear aim

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Productos afectados
aimhubio · aim
CVEs relacionadas — aimhubio aim

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-43775HIGHArbitrary file reading vulnerability in AimEPSS 1.9%CVE-2026-85663CRITICALAim 3.29.1 Remote Code Execution via Unauthenticated Method DispatchEPSS 0.7%CVE-2024-8863MEDIUMaimhubio aim Text Explorer textbox.tsx dangerouslySetInnerHTML cross site scriptingEPSS 0.5%