Critical severity9.8NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026
CVE-2022-32997
CVE-2022-32997
Description
The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:pypi:rootinteractive:*:*:*:*:*:pypi:*:*+ 3 more
- cpe:2.3:a:pypi:rootinteractive:*:*:*:*:*:pypi:*:*range: >=0.0.5,<0.0.19
- cpe:2.3:a:pypi:rootinteractive:0.0.19:-:*:*:*:pypi:*:*
- cpe:2.3:a:pypi:rootinteractive:0.0.19:b0:*:*:*:pypi:*:*
- (no CPE)range: 0.0.5 to 0.0.19b0
- PyPI/RootInteractivedescription
Patches
Vulnerability mechanics
References
3- github.com/miranov25/RootInteractive/issues/206nvdExploitIssue TrackingThird Party Advisory
- pypi.doubanio.com/simple/requestnvdProduct
- pypi.org/project/RootInteractive/nvdProduct
News mentions
0No linked articles in our index yet.