Command Injection Vulnerability in Python library's imaplib Module

CVE-2025-15366

What is CVE-2025-15366?

The imaplib module in Python is susceptible to command injection when user-controlled commands are processed. This vulnerability allows attackers to inject additional commands via newline characters, potentially leading to unauthorized command execution. It is crucial for developers to implement mitigations that reject any commands containing control characters to safeguard their applications against exploitation.

References