PT-2025-50215 · Sublime Hq · Sublime Text

Published 2022-12-27 · Updated 2026-01-02 · CVE-2025-65741

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sublime Text versions prior to Build 3209

Description Sublime Text 3 is susceptible to a Dylib Injection issue on MacOS. An attacker can compile a dynamic library (.dylib file) and execute it within the Sublime Text application’s process. This allows for potentially malicious code execution within the application's context.

Recommendations Update Sublime Text to a version later than Build 3208.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2026-01041

CVE-2025-65741

Affected Products

Sublime Text

References · 9

• 🔥 https://github.com/vinicius-batistella/CVE-2025-65741 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-65741 · Security Note
• https://osv.dev/vulnerability/CVE-2025-65741 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01041 · Security Note
• https://github.com/sublimehq/sublime_text · Note
• https://t.me/cveNotify/147629 · Telegram Post
• https://sublimetext.com/3 · Note
• https://twitter.com/CVEnew/status/2003233996747210964 · Twitter Post
• https://sublimetext.com/download · Note