CVE-2022-34055

CVE-2022-34055 describes a critical code execution backdoor found in version 0.0.1 of the drxhello package on PyPI, allowing attackers to compromise systems. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability, including access to sensitive user data and digital currency keys, and privilege escalation. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.