Security Advisory

CVE-2025-3753

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-17 19:14:20
Last updated 2025-07-18 08:05:27
Assigner canonical
CVSS score not scored
State PUBLISHED

Description

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.