CVE-2025-30358: Mesop class pollution allows overwriting global variables at runtime

Summary

Mesop, a Python-based UI framework for building web applications, has a class pollution vulnerability in versions prior to 0.14.1. It lets attackers overwrite global variables and class attributes in certain Mesop modules at runtime, which can directly cause a denial of service and, given the application's implementation, identity confusion that may enable jailbreak attacks against LLMs. With suitable gadgets, it could also lead to remote code execution.

Mitigation

Upgrade to version 0.14.1 to obtain a fix for the issue.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• mesopPyPINo LLM dependency detected

Related items

• MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoTraceRouter++: Causal Semantic Routing Realignment via Optimal TransportSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoCrowdStrike to Acquire Dreadnode to Bring Automated AI Security Testing to the Falcon PlatformSimilar attack · CrowdStrike Blog