CVE-2025-6167

Description

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function create_workflow of the file python_a2a/agent_flow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommended to upgrade the affected component.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

EPSS Score

Exploitation Probability

0.033

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-6167 are fixed in Python-python-a2a 0.5.6	Windows
Vulnerabilities CVE-2025-6167 are fixed in Python-python-a2a for linux 0.5.6	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234