aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary files from the client using a rogue server. It is possible to create a rogue MySQL server that emulates authorization, ignores client flags and requests arbitrary files from the client by sending a LOAD_LOCAL instruction packet. This issue has been patched in version 0.3.0.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-     side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary     files from the client using a rogue server. It is possible to create a rogue MySQL server that emulates     authorization, ignores client flags and requests arbitrary files from the client by sending a LOAD_LOCAL     instruction packet. This issue has been patched in version 0.3.0. (CVE-2025-62611)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - aiomysql is a library for accessing a MySQL database from the asyncio. Prior to version 0.3.0, the client-
    side settings are not checked before sending local files to MySQL server, which allows obtaining arbitrary
    files from the client using a rogue server. It is possible to create a rogue MySQL server that emulates
    authorization, ignores client flags and requests arbitrary files from the client by sending a LOAD_LOCAL
    instruction packet. This issue has been patched in version 0.3.0. (CVE-2025-62611)

ID	Name	Product	Family	Severity
271719	Linux Distros Unpatched Vulnerability : CVE-2025-62611	Nessus	Misc.	high
435717	SCA: security update for aiomysql (GHSA-r397-ff8c-wv2g)	Tenable Cloud Security	SCA Checks	high
435717	SCA: security update for aiomysql (GHSA-r397-ff8c-wv2g)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2025-62611

high

Tenable Plugins

high

high

high