PT-2025-36111
CVE-2025-55037
·
Published
2025-09-05
·
Updated
2026-06-29
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TkEasyGUI versions prior to 1.0.22
Description
An OS Command Injection issue exists in TkEasyGUI. If exploited, an unauthenticated remote attacker may execute arbitrary OS commands if the settings are configured to construct messages from external sources.
Recommendations
Update TkEasyGUI to version 1.0.22 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾