Unrated severityNVD Advisory· Published Jan 6, 2026· Updated Jan 6, 2026
Vulnerable Python version used in Forcepoint One DLP Client
CVE-2025-14026
Description
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
Affected products
2- Range: 23.04.5642
- Forcepoint/Forcepoint One Endpoint (F1E)v5Range: 23.11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.