CVE-2025-3753 — Unsafe use of eval() method in rosbag tool

CVE-2025-3753

Unsafe use of eval() method in rosbag tool PUBLISHED

Description (CNA)

A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied input in the 'rosbag filter' command. This flaw enables attackers to craft and execute arbitrary Python code.

Affected (CNA)

Vendor / product	Versions
Open Source Robotics Foundation / Robot Operating System (ROS)	affected Noetic Ninjemys; affected Melodic Morenia; affected Kinetic Kame; affected Indigo Igloo

CWE

CWE-95, CWE-94

References

https://www.ros.org/blog/noetic-eol/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.