CVE-2017-16616

CVE-2017-16616 is a critical vulnerability affecting PyAnyAPI before version 0.6.1, where improper YAML parsing allows for arbitrary Python command execution. This flaw stems from using 'load' instead of 'safe_load' in the YAMLParser method, enabling an attacker to inject and execute malicious Python code. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, and community discussion is minimal, the high CVSS and FAUCET Risk Score of 80/100 underscore its significant potential impact.