CVE-2025-27607
CVE-2025-27607 is a critical Remote Code Execution (RCE) vulnerability in the Python JSON Logger library. Specifically, versions prior to 3.3.0 are susceptible due to a missing dependency that could allow a malicious third party to execute arbitrary code on systems using the library with development dependencies installed on Python 3.13. This vulnerability arose because the msgspec-python313-pre
package was deleted, enabling an attacker to potentially claim the name and inject malicious code. While CVE-2025-27607 has a CVSS score of 0, its SOCRadar Vulnerability Risk Score (SVRS) is 44, indicating a moderate level of real-world risk due to potential exploitability. Although not deemed a "critical" vulnerability based on the SVRS threshold of 80, users should update to version 3.3.0 or later to mitigate the security risk. The vulnerability's significance stems from its potential to allow attackers to gain full control over affected systems, highlighting the importance of careful dependency management in software development.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.