CVE-2025-55322CWE-1327

OmniParser Remote Code Execution Vulnerability

High · published September 24, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Weakness
CWE-1327 · Binding to an Unrestricted IP Address
Published
2025-09-24T19:03Z
EPSS history
Timeline
  • 24 SEP 19:03Z
    OmniParser Remote Code Execution Vulnerability
    cvelistv5