RCE in Pyinstaller

CVE-2025-59042

PyInstaller bundles a Python application and all its dependencies into a single package. Due to a special entry being appended to `sys.path` during the bootstrap process of a PyInstaller-frozen application, and due to the bootstrap script…

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.