id: PYSEC-2026-1088
published: "2026-07-07T16:02:53.521076Z"
modified: "2026-07-07T17:23:34.459262Z"
aliases:
- CVE-2025-5321
- GHSA-gp5h-f9c5-8355
summary: Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
details: A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Query leads to sandbox issue. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
affected:
- package:
    name: aim
    ecosystem: PyPI
    purl: pkg:pypi/aim
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - last_affected: 3.29.1
  versions:
  - 2.0.19
  - 2.0.20
  - 2.0.21
  - 2.0.22
  - 2.0.23
  - 2.0.24
  - 2.0.25
  - 2.0.26
  - 2.0.27
  - 2.1.0
  - 2.1.1
  - 2.1.2
  - 2.1.3
  - 2.1.4
  - 2.1.5
  - 2.1.6
  - 2.2.0
  - 2.2.1
  - 2.3.0
  - 2.4.0
  - 2.5.0
  - 2.6.0
  - 2.7.0
  - 2.7.1
  - 2.7.2
  - 2.7.3
  - 2.7.4
  - 3.0.0
  - 3.0.1
  - 3.0.2
  - 3.0.3
  - 3.0.4
  - 3.0.5
  - 3.0.6
  - 3.0.7
  - 3.1.0
  - 3.1.1
  - 3.10.0
  - 3.10.0.dev9
  - 3.10.1
  - 3.10.2
  - 3.10.3
  - 3.11.0
  - 3.11.0.dev4
  - 3.11.1
  - 3.11.1.dev1
  - 3.11.2
  - 3.12.0
  - 3.12.0.dev2
  - 3.12.1
  - 3.12.2
  - 3.13.0
  - 3.13.1
  - 3.13.2
  - 3.13.3
  - 3.13.4
  - 3.14.0
  - 3.14.1
  - 3.14.2
  - 3.14.3
  - 3.14.4
  - 3.15.0
  - 3.15.1
  - 3.15.2
  - 3.16.0
  - 3.16.1
  - 3.16.2
  - 3.17.0
  - 3.17.1
  - 3.17.2
  - 3.17.3
  - 3.17.4
  - 3.17.5
  - 3.17.5rc1
  - 3.17.5rc2
  - 3.17.5rc3
  - 3.17.5rc4
  - 3.18.0
  - 3.18.0.dev2
  - 3.18.0.dev3
  - 3.18.0.dev4
  - 3.18.0.dev5
  - 3.18.1
  - 3.19.0
  - 3.19.1
  - 3.19.2
  - 3.19.3
  - 3.2.0
  - 3.2.1
  - 3.2.2
  - 3.20.1
  - 3.21.0
  - 3.22.0
  - 3.23.0
  - 3.24.0
  - 3.25.0
  - 3.25.1
  - 3.26.0.dev1
  - 3.26.1
  - 3.27.0
  - 3.28.0
  - 3.29.0
  - 3.29.0.dev20250321
  - 3.29.0.dev20250322
  - 3.29.0.dev20250323
  - 3.29.0.dev20250324
  - 3.29.0.dev20250327
  - 3.29.0.dev20250328
  - 3.29.0.dev20250329
  - 3.29.0.dev20250330
  - 3.29.0.dev20250331
  - 3.29.0.dev20250401
  - 3.29.0.dev20250402
  - 3.29.0.dev20250403
  - 3.29.0.dev20250404
  - 3.29.0.dev20250405
  - 3.29.0.dev20250406
  - 3.29.0.dev20250407
  - 3.29.0.dev20250408
  - 3.29.0.dev20250409
  - 3.29.0.dev20250410
  - 3.29.0.dev20250411
  - 3.29.0.dev20250412
  - 3.29.0.dev20250413
  - 3.29.0.dev20250415
  - 3.29.0.dev20250416
  - 3.29.0.dev20250417
  - 3.29.0.dev20250418
  - 3.29.0.dev20250419
  - 3.29.1
  - 3.3.0
  - 3.3.1
  - 3.3.2
  - 3.3.3
  - 3.3.4
  - 3.3.5
  - 3.4.0
  - 3.4.1
  - 3.5.0
  - 3.5.1
  - 3.5.2
  - 3.5.3
  - 3.5.4
  - 3.6.0
  - 3.6.1
  - 3.6.2
  - 3.6.3
  - 3.7.0
  - 3.7.1
  - 3.7.2
  - 3.7.3
  - 3.7.4
  - 3.7.5
  - 3.8.0
  - 3.8.1
  - 3.9.0a1
  - 3.9.0a14
  - 3.9.2
  - 3.9.3
  - 3.9.4
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2025-5321
- type: WEB
  url: https://gist.github.com/superboy-zjc/1fc4747a0ac77a1edc8c32e1d4edc54c
- type: PACKAGE
  url: https://github.com/aimhubio/aim
- type: WEB
  url: https://vuldb.com/?ctiid.310492
- type: WEB
  url: https://vuldb.com/?id.310492
- type: WEB
  url: https://vuldb.com/?submit.580253
- type: PACKAGE
  url: https://pypi.org/project/aim
- type: ADVISORY
  url: https://github.com/advisories/GHSA-gp5h-f9c5-8355
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P