CyberSecBulletin

Pyinstaller vulnerabilities

We track 2 vulnerabilities in Pyinstaller products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.

2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score

Latest Pyinstaller vulnerabilities

  • 7.0 High severity

    pyinstaller: Improper Control of Generation of Code

    CVE-2025-59042Pyinstaller

    PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to `sys.path` during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script attempting to load an

  • 7.8 High severity

    pyinstaller: Incorrect Permission Assignment for Critical Resource

    CVE-2023-49797Pyinstaller

    PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise