HighVulnerability
CVE-2025-30358: Mesop class pollution allows overwriting global variables at runtime
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-30358
- Published
- Record updated
- Affected
- mesop < 0.14.1
- Fixed in
- 0.14.1
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.7%
Summary
Mesop, a Python-based UI framework for building web applications, has a class pollution vulnerability in versions prior to 0.14.1. It lets attackers overwrite global variables and class attributes in certain Mesop modules at runtime, which can directly cause a denial of service and, given the application's implementation, identity confusion that may enable jailbreak attacks against LLMs. With suitable gadgets, it could also lead to remote code execution.
Mitigation
Upgrade to version 0.14.1 to obtain a fix for the issue.
Related items
- CriticalHermes Agent - PKCE Session Takeover via Redirect-URI Parser ConfusionSimilar attack · Tenable Research Advisories
- HighHermes Agent - Pre-Authentication Disk ConsumptionSimilar attack · Tenable Research Advisories
- MediumHermes Agent - Pre-Authentication Memory ExhaustionSimilar attack · Tenable Research Advisories
- MediumGHSA-hmq2-7hp6-7crh: Banks: User-controlled prompt input can be parsed as privileged chat messagesSimilar attack · GitHub Advisory Database
- HighGHSA-6wjp-v33h-5cvq: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosureSimilar attack · GitHub Advisory Database