CVE-2025-14026: Vulnerable Python version used in Forcepoint One DLP Client
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14026?
CVE-2025-14026 has been classified with a moderate severity level due to the limitations it imposes on the usage of the ctypes library.
How do I fix CVE-2025-14026?
To address CVE-2025-14026, ensure that you upgrade to a patched version of the Forcepoint One DLP Client that does not contain the vulnerable Python version.
What versions are affected by CVE-2025-14026?
CVE-2025-14026 affects Forcepoint One DLP Client version 23.04.5642 and possibly newer versions.
What are the implications of CVE-2025-14026 for developers?
The restrictions imposed by CVE-2025-14026 limit developers' ability to use the ctypes library for calling shared libraries and other functionalities.
Does CVE-2025-14026 affect Python installations outside of Forcepoint One DLP Client?
CVE-2025-14026 specifically impacts the version of Python embedded within Forcepoint One DLP Client and does not affect standalone Python installations.