CVE-2025-70887

CVE-2025-70887 describes a high-severity privilege escalation vulnerability in ralphje Signify versions prior to 0.9.2, specifically impacting the signed_data.py and context.py components. This flaw carries a CVSS score of 8.8 (High), indicating that a remote attacker with low privileges can exploit it with low complexity and no user interaction, leading to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code available on platforms like Metasploit or ExploitDB, the vulnerability has garnered minimal community discussion.