cvedb.io
CVE-2022-32997
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2022-06-24T21:15:08.010 · Last modified 2026-06-17T04:48:21.310

Summary

The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Affected products

pypi — rootinteractive

Does this affect you?

Add your gear to cvedb and we'll alert you only when pypi ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.