CVE-2025-6069

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

• ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
• AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
• Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.52% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 41.9% of scored records. A rank, not a probability.

NVD base score

4.3 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

NVD analysis status

Deferred. NVD last modified this record on 2026-07-31.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-06-17 13:39Z1 YR AGO

Last updated

2026-07-31 14:01Z1 MO AGO

Reserved

2025-06-13

Assigning CNA

PSF

Record state

PUBLISHED

Severity

Medium (CVSS 4.3)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses

• CWE-1333Inefficient Regular Expression ComplexityBase

Data version

5.2

Document digest

f661afa64b4bd7472b1eabe1ca24c8cad5ab6728079b2f2e4322190102226977

• github.comhttps://github.com/python/cpython/issues/135462issue-tracking
• github.comhttps://github.com/python/cpython/pull/135464patch
• github.comhttps://github.com/python/cpython/commit/4455cbabf991e202185a25a631af206f60bbc949patch
• github.comhttps://github.com/python/cpython/commit/6eb6c5dbfb528bd07d77b60fd71fd05d81d45c41patch
• github.comhttps://github.com/python/cpython/commit/d851f8e258c7328814943e923a7df81bca15df4bpatch
• mail.python.orghttps://mail.python.org/archives/list/security-announce@python.org/thread/K5PIYLR6EP3WR7ZOKKYQUWEDNQVUXOYM/vendor-advisory
• github.comhttps://github.com/python/cpython/commit/8d1b3dfa09135affbbf27fb8babcf3c11415df49patch
• github.comhttps://github.com/python/cpython/commit/ab0893fd5c579d9cea30841680e6d35fc478afb5patch
• github.comhttps://github.com/python/cpython/commit/f3c6f882cddc8dc30320d2e73edf019e201394fcpatch
• github.comhttps://github.com/python/cpython/commit/fdc9d214c01cb4588f540cfa03726bbf2a33fc15patch