Executive brief
Tryton vulnerable to arbitrary command execution
Affected products
- PyPI tryton
- PyPI trytond
Junglewise Threat Intelligence
CVE-2014-6633: PYSEC-2026-3390 - Tryton vulnerable to arbitrary command execution
CVE-2014-6633 · Severity: low · CVSS 3 · Published 2026-07-09
Technologies: tryton (PyPI), trytond (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1989 - trytond does not enforce access rights for data export
- PYSEC-2026-1990 - trytond allows remote attackers to obtain sensitive trace-back (server setup) information
- PYSEC-2026-1991 - trytond does not enforce access rights for the route of the HTML editor.
- PYSEC-2026-1054 - Tryton Directory Traversal vulnerability
- PYSEC-2026-741 - XML Entity Expansion in trytond and proteus