The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x…
Priority MEDIUM 43CWE-77Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-77.
Summary
The safe_eval function in trytond in Tryton before 2.4.15, 2.6.x before 2.6.14, 2.8.x before 2.8.11, 3.0.x before 3.0.7, and 3.2.x before 3.2.3 allows remote authenticated users to execute arbitrary commands via shell metacharacters in (1) the collection.domain in the webdav module or (2) the formula field in the price_list module.
Why it matters now
EPSS 0.02577 85th percentileScored 2026-11-07
Fix Fixed tryton (PyPI): 2.4.15, 2.6.14, 2.8.11 +1trytond (PyPI): 2.4.15, 2.6.14, 2.8.11 +2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | tryton (PyPI) | before 2.4.15 | 2.4.15 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | tryton (PyPI) | 2.6.0 to before 2.6.14 | 2.6.14 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | tryton (PyPI) | 2.8.0 to before 2.8.11 | 2.8.11 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | tryton (PyPI) | 3.2.0 to before 3.2.3 | 3.2.3 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | trytond (PyPI) | 2.4.0 to before 2.4.15 | 2.4.15 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | trytond (PyPI) | 2.6.0 to before 2.6.14 | 2.6.14 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | trytond (PyPI) | 2.8.0 to before 2.8.11 | 2.8.11 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | trytond (PyPI) | 3.2.0 to before 3.2.3 | 3.2.3 | Patch available | GHSA-m9jj-5qvj-5fhx |
| — | trytond (PyPI) | 3.0.0 to before 3.0.7 | 3.0.7 | Patch available | GHSA-m9jj-5qvj-5fhx |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- tryton (PyPI) Vendor— Affected before 2.4.15 Fixed in 2.4.15 Patch available GHSA-m9jj-5qvj-5fhx
- tryton (PyPI) Vendor— Affected 2.6.0 to before 2.6.14 Fixed in 2.6.14 Patch available GHSA-m9jj-5qvj-5fhx
- tryton (PyPI) Vendor— Affected 2.8.0 to before 2.8.11 Fixed in 2.8.11 Patch available GHSA-m9jj-5qvj-5fhx
- tryton (PyPI) Vendor— Affected 3.2.0 to before 3.2.3 Fixed in 3.2.3 Patch available GHSA-m9jj-5qvj-5fhx
- trytond (PyPI) Vendor— Affected 2.4.0 to before 2.4.15 Fixed in 2.4.15 Patch available GHSA-m9jj-5qvj-5fhx
- trytond (PyPI) Vendor— Affected 2.6.0 to before 2.6.14 Fixed in 2.6.14 Patch available GHSA-m9jj-5qvj-5fhx
- trytond (PyPI) Vendor— Affected 2.8.0 to before 2.8.11 Fixed in 2.8.11 Patch available GHSA-m9jj-5qvj-5fhx
- trytond (PyPI) Vendor— Affected 3.2.0 to before 3.2.3 Fixed in 3.2.3 Patch available GHSA-m9jj-5qvj-5fhx
- trytond (PyPI) Vendor— Affected 3.0.0 to before 3.0.7 Fixed in 3.0.7 Patch available GHSA-m9jj-5qvj-5fhx
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tryton:tryton:*:*:*:*:*:*:*:* | 2.4.0 to before 2.4.15; 2.6.0 to before 2.6.14; 2.8.0 to before 2.8.11; 3.0.0 to before 3.0.7; 3.2.0 to before 3.2.3 | Vulnerable | Tryton |
- cpe:2.3:a:tryton:tryton:*:*:*:*:*:*:*:* Versions 2.4.0 to before 2.4.15; 2.6.0 to before 2.6.14; 2.8.0 to before 2.8.11; 3.0.0 to before 3.0.7; 3.2.0 to before 3.2.3 Vulnerable ·Tryton
Remediation
- Fix · GHSA-m9jj-5qvj-5fhx tryton (PyPI) Fixed in 2.4.15 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx tryton (PyPI) Fixed in 2.6.14 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx tryton (PyPI) Fixed in 2.8.11 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx tryton (PyPI) Fixed in 3.2.3 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx trytond (PyPI) Fixed in 2.4.15 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx trytond (PyPI) Fixed in 2.6.14 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx trytond (PyPI) Fixed in 2.8.11 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx trytond (PyPI) Fixed in 3.2.3 Advisory →
- Fix · GHSA-m9jj-5qvj-5fhx trytond (PyPI) Fixed in 3.0.7 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2014-6633
- 2026-10-03 Alias added: GHSA-m9jj-5qvj-5fhx
References
Advisory 2
Other 5
- https://bugs.tryton.org/issue4155
- https://github.com/tryton/trytond/commit/19fc2a01357b7638041953326e404f51d96fad06
- https://github.com/tryton/trytond/commit/3e4c2b7e8c7b3358597a0d484fa98f45483ee92a
- https://github.com/pypa/advisory-database/tree/main/vulns/trytond/PYSEC-2018-59.yaml
- https://github.com/tryton/trytond
More Tryton vulnerabilities
- TI-2013-03957 Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before… CVSS 2.0HIGH 7.8
- TI-2018-13766 The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext… CVSS 3.0MEDIUM 5.9
- TI-2017-00335 Improper privilege management in tryton-server before 3.4.0-3+deb8u3 CVSS 3.0MEDIUM 5.3
- TI-2016-01139 Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8… CVSS 3.0MEDIUM 5.3
- TI-2016-01140 file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before… CVSS 3.0MEDIUM 4.4
Sources
- CVE-2014-6633 · CVE Program
- CVE-2014-6633 · NVD
- FIRST EPSS
- GHSA-m9jj-5qvj-5fhx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences