Junglewise Threat Intelligence

CVE-2025-64712: PYSEC-2026-558 - Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

CVE-2025-64712 · Severity: low · CVSS 3.1 · Published 2026-06-29

Technologies: unstructured (PyPI). Vendors: PyPI.

Executive brief

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

Affected products

PyPI unstructured

Related threats

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Wor
GO-2024-3315 - in github.com/Unstructured-IO/unstructured