PT-2025-50090

CVE-2025-5471

·

Published

2025-07-22

·

Updated

2026-02-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Yandex Telemost versions prior to 2.19.1
Description An uncontrolled search path element issue exists in Yandex Telemost on MacOS, enabling search order hijacking. This allows an attacker to potentially manipulate the system's search path to load malicious code.
Recommendations Update Yandex Telemost to version 2.19.1 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-426: Untrusted Search Path
CWE-427: Uncontrolled Search Path Element
Related identifiers
CVE-2025-5471
BDU:2025-08835
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com