PT-2025-39393 · Unknown · Geyang Ml-Logger

0X1F · Published 2025-09-25 · Updated 2025-09-25 · CVE-2025-10950

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions geyang ml-logger (affected versions not specified)

Description A flaw exists in geyang ml-logger. The log handler function within the ml logger/server.py file, specifically in the Ping Handler component, is susceptible to deserialization due to manipulation of the data argument. This issue can be triggered remotely. The exploit has been publicly disclosed. As this product uses a rolling release model, specific version details for affected or updated releases are unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

RCE

Weakness Enumeration

CWE-502

CWE-20

Related Identifiers

CVE-2025-10950

GHSA-57HM-8RJV-498W

Affected Products

Geyang Ml-Logger

References · 11

• 🔥 https://github.com/geyang/ml-logger/issues/72 · Exploit
• https://osv.dev/vulnerability/CVE-2025-10950 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-57hm-8rjv-498w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10950 · Security Note
• https://github.com/geyang/ml-logger · Note
• https://twitter.com/CVEnew/status/1971226589263429829 · Twitter Post
• https://t.me/CVEtracker/33324 · Telegram Post
• https://vuldb.com/?submit.652461 · Note
• https://vuldb.com/?id.325820 · Note
• https://t.me/cveNotify/136408 · Telegram Post
• https://vuldb.com/?ctiid.325820 · Note