CVE-2014-1927

CVE-2014-1927 is a critical vulnerability affecting the python-gnupg library (version 0.3.5) where the shell_quote function fails to properly sanitize strings. This flaw allows attackers to execute arbitrary code by injecting shell metacharacters, such as command-substitution sequences, through unspecified input vectors. With a CVSS score of 7.5, this vulnerability is highly severe, requiring no authentication and having low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. While it is not listed in CISA's KEV catalog and lacks public exploit intelligence (Metasploit, Nuclei, ExploitDB), its high FAUCET Risk Score of 52/100 indicates a significant threat. There is no evidence of active exploitation or community discussion surrounding this vulnerability.