Arbitrary Code Execution in IO::Socket::SSL::SelfCertificate by Perl
CVE-2026-97230
What is CVE-2026-97230?
The IO::Socket::SSL::SelfCertificate version 1.00 for Perl is compromised by a vulnerability that allows malware to execute Python code from an obfuscated URL. When the generate_certificate function is invoked, it executes a Python script saved as a certificate file. This script attempts to retrieve and execute additional code from a hardcoded HTTP URL, which is base64 encoded to obscure its true nature. The exploit allows arbitrary code to be executed as the user without needing to store any script on the impacted device. Notably, the affected releases lack test scripts or build hooks, possibly implying an intention to trigger the malicious payload post-installation. The dropper script can be found within lib/Crypt/SelfCertificate/sample/cert.pem.