CVE-2025-5321

Name of the Vulnerable Software and Affected Versions aimhubio aim versions prior to 3.29.1

Description A critical issue exists in the run view Object Handler component within the /aim/storage/query.py file. The RestrictedPythonQuery() function is susceptible to remote manipulation via the Query argument, which leads to a sandbox bypass and potentially elevated privileges. This flaw allows an attacker to initiate the attack remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the RestrictedPythonQuery() function in the /aim/storage/query.py file to minimize the risk of exploitation.