Unknown · Python-Future · CVE-2025-50817
**Name of the Vulnerable Software and Affected Versions**
Python-Future version 1.0.0
**Description**
An issue in the Python-Future module allows for arbitrary code execution through the unintended import of a file named 'test.py'. When the module is loaded, it automatically imports 'test.py' if the file exists in the same directory or within the `sys.path`. An attacker with the ability to write files to the server can exploit this behavior to execute arbitrary code.
**Recommendations**
Update Python-Future version 1.0.0 to the latest version that contains the fix for the automatic import of 'test.py'.
As a temporary workaround, ensure that no file named 'test.py' exists in the module's directory or within the `sys.path` to prevent unintended execution.