CVE-2025-15367

CVE-2025-15367 describes a command injection vulnerability in the poplib module, where user-controlled input can lead to the injection of additional commands via newlines. While specific affected products are not listed, the vulnerability has a CVSS score of 5.9 (MEDIUM), indicating a network-based attack with low attack complexity, requiring high privileges to achieve high integrity impact. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB; however, it has garnered significant community discussion and media coverage, including security updates from SUSE.