Back to Database
Status published
Critical
CVE-2025-55037
Improper neutralization of special elements used in an OS command...
Vulnerability Description
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55037
Credits & Attribution
No credits recorded in the NVD database.
References
More from kujirahand
View All →CVE-2025-55671
Uncontrolled search path element issue exists in TkEasyGUI versions prior...
High
8.5
CVE-2022-42496
OS command injection vulnerability in Nako3edit, editor component of nadesiko3...
Unknown
0
CVE-2022-41777
Improper check or handling of exceptional conditions vulnerability in Nako3edit,...
Unknown
0
CVE-2022-41642
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and...
Unknown
0
CVE-2021-20721
KonaWiki2 versions prior to 2.2.4 allows a remote attacker to...
Critical
9.8
Affected Vendor
kujirahand
View all reports →Affected Software
TkEasyGUI
Vulnerable Versions:
versions prior to v1.0.22
Timeline
Official Publish:
September 5th, 2025
Last Modified:
September 5th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H