Executive brief
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
Affected products
- PyPI aim
Junglewise Threat Intelligence
CVE-2025-5321: PYSEC-2026-1088 - Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
CVE-2025-5321 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: aim (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1087 - Aim vulnerable to Cross-site Scripting
- PYSEC-2026-1085 - Aim Excessive Data Query Operations in a Large Data Table vulnerability
- PYSEC-2026-1089 - Aim Uncontrolled Resource Consumption vulnerability
- PYSEC-2026-1094 - Aim Improper Access Control
- PYSEC-2026-1083 - Aim allows denial of service due to no timeouts for some tracking server endpoints