A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code. NOTE: Multiple third parties have disputed this issue and stated that it is not a security flaw in python-future and is a documented feature of Python’s import system in the handling of sys.path.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03049-1 advisory.

    - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03038-1 advisory.

    - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended     import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in     the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability     to write files to the server, allowing the execution of arbitrary code. NOTE: Multiple third parties have     disputed this issue and stated that it is not a security flaw in python-future and is a documented feature     of Python's import system in the handling of sys.path. (CVE-2025-50817)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2025:03028-1 advisory.

    - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:03029-1 advisory.

    - CVE-2025-50817: Fixed arbitrary code execution via the automatic import of file test.py (bsc#1248124)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
278714	SUSE SLED15 / SLES15 Security Update : python-future (SUSE-SU-2025:03049-1)	Nessus	SuSE Local Security Checks	Local	high
260436	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-future (SUSE-SU-2025:03038-1)	Nessus	SuSE Local Security Checks	Local	high
259997	Linux Distros Unpatched Vulnerability : CVE-2025-50817	Nessus	Misc.	Local	medium
258147	SUSE SLES12 Security Update : python-future (SUSE-SU-2025:03028-1)	Nessus	SuSE Local Security Checks	Local	high
258146	SUSE SLES12 Security Update : python-future (SUSE-SU-2025:03029-1)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2025-50817

high

Tenable Plugins

high

high

medium

high

high