PT-2026-1435 · Python+1 · Python+1

Published 2026-01-06 · Updated 2026-02-10 · CVE-2025-14026

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint One DLP Client versions 23.04.5642 and later

Description The Forcepoint One DLP Client includes a restricted version of Python 2.5.4 that limits the use of the ctypes library. The ctypes library is a foreign function interface (FFI) for Python, allowing calls to DLLs/shared libraries, memory allocation, and direct code execution. It has been demonstrated that these restrictions can be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1104

CWE-1395

CWE-676

Related Identifiers

CVE-2025-14026

Affected Products

Forcepoint One Dlp Client

Python

References · 12

• https://osv.dev/vulnerability/CVE-2025-14026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14026 · Security Note
• https://t.me/cveNotify/147857 · Telegram Post
• https://t.me/cveNotify/151620 · Telegram Post
• https://twitter.com/ActiveITSolutns/status/2010711515255439850 · Twitter Post
• https://kb.cert.org/vuls/id/420440 · Note
• https://twitter.com/VulmonFeeds/status/2008568788141134042 · Twitter Post
• https://t.me/pentestingnews/72141 · Telegram Post
• https://twitter.com/Karma_X_Inc/status/2008775486059450740 · Twitter Post
• https://support.forcepoint.com/s/article/000042256 · Note
• https://twitter.com/CVEnew/status/2008558928427180072 · Twitter Post
• https://twitter.com/ThreatSynop/status/2008810051335508122 · Twitter Post