PT-2025-36112 · Tkeasygui · Tkeasygui

Satoki Tsuji · Published 2025-09-05 · Updated 2025-09-05 · CVE-2025-55671

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions TkEasyGUI versions prior to 1.0.22

Description An uncontrolled search path element issue exists that may lead to arbitrary code execution with the privileges of the running program.

Recommendations Update TkEasyGUI to version 1.0.22 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-55671

GHSA-PH2W-CX28-VHRQ

Affected Products

Tkeasygui

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-55671 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55671 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ph2w-cx28-vhrq · Vendor Advisory
• https://github.com/kujirahand/tkeasygui-python/releases/tag/v1.0.22 · Note
• https://github.com/kujirahand/tkeasygui-python · Note
• https://t.me/CVEtracker/31758 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1963878940600041923 · Twitter Post
• https://twitter.com/CVEnew/status/1963893956783272067 · Twitter Post
• https://jvn.jp/en/jp/JVN48739895 · Note
• https://t.me/cveNotify/134360 · Telegram Post