by Kastro
Paper/Archive/CVE-2025-64712

CVE-2025-64712

Unstructured-IO unstructured — Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 52.7.527 × 2010.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partition_msg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. This issue has been patched in version 0.18.18.

Affected

ProductAffectedFixed inSource
unstructured< 0.18.18–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/Unstructured-IO/unstructured/security/advisories/GHSA-gm8q-m8mv-jj5mrefgithub.com/Unstructured-IO/unstructured/commit/b01d35b2373fd087d2e15162b9c021663c97155d