CVE-2025-50817 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-50817 Interim 1 2 2025-10-04T23:14:29Z current 2025-09-22T07:42:50Z 2025-10-04T23:14:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-50817 A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code. NOTE: Multiple third parties have disputed this issue and stated that it is not a security flaw in python-future and is a documented feature of Python's import system in the handling of sys.path. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-August/041429.html E-Mail link for SUSE-SU-2025:03028-1 https://lists.suse.com/pipermail/sle-updates/2025-August/041428.html E-Mail link for SUSE-SU-2025:03029-1 https://lists.suse.com/pipermail/sle-updates/2025-September/041481.html E-Mail link for SUSE-SU-2025:03038-1 https://lists.suse.com/pipermail/sle-updates/2025-September/041491.html E-Mail link for SUSE-SU-2025:03049-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Manager Proxy 4.3 SUSE Manager Proxy LTS 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Retail Branch Server LTS 4.3 SUSE Manager Server 4.3 SUSE Manager Server LTS 4.3 openSUSE Leap 15.6 python-future python-future-0.15.2-3.6.1 python-future-0.15.2-3.8.1 python2-future python2-future-0.16.0-150000.3.3.1 python3-future python3-future-0.16.0-150000.3.3.1 python3-future-0.18.2-150300.3.6.1 python311-future-0.18.3-150400.6.6.1 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Enterprise Storage 7.1 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Micro 5.1 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Micro 5.2 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Micro 5.3 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Micro 5.4 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Micro 5.5 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 python-future-0.15.2-3.6.1 as a component of SUSE Linux Enterprise Module for Public Cloud 12 python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 python-future-0.15.2-3.8.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA python-future-0.15.2-3.8.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS python2-future-0.16.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA python3-future-0.16.0-150000.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Server 15 SP5-LTSS python-future-0.15.2-3.8.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python311-future-0.18.3-150400.6.6.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Manager Proxy LTS 4.3 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Manager Retail Branch Server LTS 4.3 python3-future-0.18.2-150300.3.6.1 as a component of SUSE Manager Server LTS 4.3 python311-future-0.18.3-150400.6.6.1 as a component of openSUSE Leap 15.6 python-future as a component of SUSE Linux Enterprise Server 12 SP4-LTSS python2-future as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python3-future as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python-future as a component of SUSE Linux Enterprise Server 15 SP1-LTSS python2-future as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python3-future as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python-future as a component of SUSE Linux Enterprise Server 15 SP2-LTSS python2-future as a component of SUSE Linux Enterprise Server 15-LTSS python3-future as a component of SUSE Linux Enterprise Server 15-LTSS python-future as a component of SUSE Linux Enterprise Server 15-LTSS python3-future as a component of SUSE Manager Proxy 4.3 python-future as a component of SUSE Manager Proxy 4.3 python3-future as a component of SUSE Manager Retail Branch Server 4.3 python-future as a component of SUSE Manager Retail Branch Server 4.3 python3-future as a component of SUSE Manager Server 4.3 python-future as a component of SUSE Manager Server 4.3 A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code. NOTE: Multiple third parties have disputed this issue and stated that it is not a security flaw in python-future and is a documented feature of Python's import system in the handling of sys.path. CVE-2025-50817 SUSE Enterprise Storage 7.1:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Micro 5.1:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Micro 5.2:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Micro 5.3:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Micro 5.4:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Micro 5.5:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP7:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Module for Public Cloud 12:python-future-0.15.2-3.6.1 SUSE Linux Enterprise Module for Python 3 15 SP6:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Module for Python 3 15 SP7:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:python-future-0.15.2-3.8.1 SUSE Linux Enterprise Server 12 SP5-LTSS:python-future-0.15.2-3.8.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:python2-future-0.16.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP2-LTSS-TERADATA:python3-future-0.16.0-150000.3.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP4-LTSS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Server 15 SP5-LTSS:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server 15 SP5-LTSS:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:python-future-0.15.2-3.8.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:python311-future-0.18.3-150400.6.6.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:python3-future-0.18.2-150300.3.6.1 SUSE Linux Enterprise Server for SAP Applications 15 SP5:python311-future-0.18.3-150400.6.6.1 SUSE Manager Proxy LTS 4.3:python3-future-0.18.2-150300.3.6.1 SUSE Manager Retail Branch Server LTS 4.3:python3-future-0.18.2-150300.3.6.1 SUSE Manager Server LTS 4.3:python3-future-0.18.2-150300.3.6.1 openSUSE Leap 15.6:python311-future-0.18.3-150400.6.6.1 important 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H