CVE-2025-5321

CVE-2025-5321 is a critical vulnerability in aimhubio aim up to version 3.29.1, specifically affecting the RestrictedPythonQuery function within the run_view Object Handler component. This flaw allows for privilege escalation through the manipulation of the "Abfrage" argument. With a CVSS score of 9.9 (Critical), the vulnerability can be exploited remotely with low privileges and no user interaction, leading to high impacts on confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there Metasploit or Nuclei modules available; however, the vendor has been unresponsive to disclosure.