PT-2025-9854 · Spacy-Llm · Spacy-Llm

Edoardo Ottavianelli · Published 2025-03-05 · Updated 2025-04-02 · CVE-2025-25362

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spacy-LLM version 0.7.2

Description A Server-Side Template Injection (SSTI) vulnerability allows attackers to execute arbitrary code via injecting a crafted payload into the template field.

Recommendations For Spacy-LLM version 0.7.2, as a temporary workaround, consider restricting access to the template field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

CWE-1336

Related Identifiers

CVE-2025-25362

GHSA-793V-GXFP-9Q9H

Affected Products

Spacy-Llm

References · 13

• https://osv.dev/vulnerability/CVE-2025-25362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-25362 · Security Note
• https://osv.dev/vulnerability/GHSA-793v-gxfp-9q9h · Vendor Advisory
• https://github.com/explosion/spacy-llm/issues/492 · Note
• https://github.com/explosion/spacy-llm/pull/491 · Note
• https://github.com/explosion/spacy-llm · Note
• https://github.com/explosion/spacy-llm/commit/8bde0490cc1e9de9dd2e84480b7b5cd18a94d739 · Note
• https://hacktivesecurity.com/blog/2025/04/01/cve-2025-25362-old-vulnerabilities-new-victims-breaking-llm-prompts-with-ssti · Note
• https://twitter.com/CVETracker/status/1897739147600593109 · Twitter Post
• https://twitter.com/CVEnew/status/1897506963317051888 · Twitter Post
• https://twitter.com/cybercronai/status/1897815837462970615 · Twitter Post
• https://t.me/cvenotify/117330 · Telegram Post
• https://t.me/cvedetector/19666 · Telegram Post