GHSA-rgrf-6mf5-m882 is a low-severity (CVSS 2.2) CWE-215 vulnerability in cdo-local-uuid. 1 public exploit reference exists, so weaponization risk is real. A fix is available for cdo-local-uuid — see the affected versions and patch details below.
cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code
Exploitation Status
Proof-of-concept exploit code exists
- CISA’s SSVC triage found public proof-of-concept exploit code for this CVE, though no confirmed active exploitation.
Exploitation and automatability from CISA’s SSVC triage for GHSA-rgrf-6mf5-m882.
EPSS Exploitation Probability
EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.
How urgent is this, really
GHSA-rgrf-6mf5-m882 plotted by exploitation likelihood (EPSS) against impact (CVSS). The shaded corner — EPSS 50%+ and CVSS 7.0+ — is where this CVE doesn't sit, though severity or exploitability alone can still warrant action.
Where this sits among everything scored
Of 378,567 CVEs with a current EPSS score, this one falls in the < 10% band (highlighted). Real counts from FIRST.org, not a sample — log-scaled since the landscape is heavily right-skewed.
Real-World Exposure
cdo-local-uuid🐍case-utils🐍case-utils🐍case-utils🐍case-utils🐍case-utils🐍case-utils🐍case-utils+3 moreReal-time download stats are indexed for npm and PyPI packages. This vulnerability affects PyPI packages — download data is not available via public APIs for these ecosystems.
Description
Impact
What kind of vulnerability is it? Who is impacted?
An information leakage vulnerability is present in cdo-local-uuid at version 0.4.0, and in case-utils in unpatched versions (matching the pattern 0.x.0) at and since 0.5.0, before 0.15.0.
The vulnerability stems from a Python function, cdo_local_uuid.local_uuid(), and its original implementation case_utils.local_uuid(). Henceforth, both will be called local_uuid().
local_uuid() generates UUIDv5s using a deterministic pseudorandom number stream. This was written to make graph application demonstrations generate consistent, version-controllable output with minimal noise caused by demonstration re-runs. Part of the information used to keep individual examples' generated output distinct from one another is seed information from the caller's environment, particularly the program's argument vector. The present working directory is also included as part of the seed information, but for reasons including maintaining user environment privacy, as well as keeping generated identifiers consistent regardless of where a source tree is housed on a user's file system, the present working directory is trimmed from the left to exclude path information outside of a supplied "Top" source directory. (In context of the Make scripting language, this "top" directory is typically in a variable called top_srcdir. In context of Git-based project management, this directory is expected to be the root directory of a freshly "Cloned" project, e.g., where .git is stored.)
Under certain conditions, a user's present working directory, as an absolute path, was incorporated into seed data for the local_uuid() deterministic pseudorandom number stream. This violates an expectation made in the documented purpose of the local_uuid() function, and leaks information about a calling user's environment.
The conditions are:
- Given a project with top source directory
top_srcdir, for instance/home/user1/Documents/Project1; - Given a Python script housed directly in
top_srcdir, for instance at${top_srcdir}/example.py, written to support the deterministic mode oflocal_uuid(); - Given a call to that Python script that follows the documentation for
local_uuid();
The absolute path for top_srcdir was then included in the seed information for the UUIDv5 stream, when what was intended was a relative path spelling. That is, instead of ./example.py being in the seed data, /home/user1/Documents/Project1/example.py was in the seed data.
This does not leak the present working directory directly. But, given other knowledge of how a program had been called to generate data using local_uuid() under these conditions, it becomes possible to determine that a chosen path can lead to a known UUIDv5 value. Note that it is not necessarily knowable that the chosen path is the only solution to a sequence reconstruction; but, the path can be confirmed to be a solution.
Patches
Has the problem been patched? What versions should users upgrade to?
The issue has been patched, in the cdo-local-uuid source repository and the case-utils source repository.
Users should upgrade to any of these versions minimally:
case-utils == 0.5.1case-utils == 0.6.1case-utils == 0.7.1case-utils == 0.8.1case-utils == 0.9.1case-utils == 0.10.1case-utils == 0.11.1case-utils == 0.12.1case-utils == 0.13.1case-utils == 0.14.1case-utils >= 0.15.0cdo-local-uuid == 0.5.0
All case-utils releases that contain the patch have the commit ea630cce66b26dae6d7fa7e02451d6e25456a5f2 in their Git history. Anyone interested in confirming the presence of this commit in a certain branch or tag can run the following test (written in Bash), substituting the desired branch name for the assigned value of my_git_ref_of_interest:
#!/bin/bash
# Present working directory ($PWD) should be in a clone of this repository:
# https://github.com/casework/CASE-Utilities-Python
my_git_ref_of_interest=main
test \
"xea630cce66b26dae6d7fa7e02451d6e25456a5f2" \
== \
"x$(git merge-base ea630cc ${my_git_ref_of_interest})"
echo $? # Should print '0'
Note that other releases have been posted atop some of those minimal versions recommended for upgrading, named, e.g., 0.5.1.post0. These releases were posted to update internal library version numbers, and otherwise contain no functional changes, in accordance with Python Packaging guidance:
Workarounds
Is there a way for users to fix or remediate the vulnerability without upgrading?
If the script calling cdo_local_uuid.local_uuid() is moved out of the "Top" source directory, the issue is addressed.
References
Are there any links users can visit to find out more?
The issue is addressed in this Pull Request:
Tests to reproduce the issue's conditions and confirm it has been addressed are in this Pull Requested:
<!-- CVSS3.1 vector determined by rubric diagrams at this page: https://www.first.org/cvss/v3.1/user-guide -->Affected Packages
| Ecosystem | Package | Vulnerable range | Fix |
|---|---|---|---|
| 🐍PyPI | cdo-local-uuid | ≥ 0.4.0&&< 0.5.0 | 0.5.0pip install --upgrade 'cdo-local-uuid==0.5.0' |
| 🐍PyPI | case-utils | ≥ 0.5.0&&< 0.5.1 | 0.5.1pip install --upgrade 'case-utils==0.5.1' |
| 🐍PyPI | case-utils | ≥ 0.6.0&&< 0.6.1 | 0.6.1pip install --upgrade 'case-utils==0.6.1' |
| 🐍PyPI | case-utils | ≥ 0.7.0&&< 0.7.1 | 0.7.1pip install --upgrade 'case-utils==0.7.1' |
| 🐍PyPI | case-utils | ≥ 0.8.0&&< 0.8.1 | 0.8.1pip install --upgrade 'case-utils==0.8.1' |
| 🐍PyPI | case-utils | ≥ 0.9.0&&< 0.9.1 | 0.9.1pip install --upgrade 'case-utils==0.9.1' |
Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
Detection & mitigation playbook
Open-source dependencyDetect
Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for cdo-local-uuid, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version.
Fix
Update cdo-local-uuid to 0.5.0 or later, then make sure no transitive (indirect) dependency still pins the vulnerable range — O3 confirms GHSA-rgrf-6mf5-m882 is resolved across your whole dependency graph.
Workarounds
If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands.
How O3 protects you
O3 Security's impact-aware SCA analyses which vulnerable code paths your application actually calls, so a match like GHSA-rgrf-6mf5-m882 can be triaged on real exposure rather than presence alone.
Tailored to GHSA-rgrf-6mf5-m882. Runtime protection reduces exposure until a permanent patch is applied and verified — it complements patching, it doesn't replace it.
Frequently Asked Questions
Is GHSA-rgrf-6mf5-m882 in your dependencies?
O3 Security finds GHSA-rgrf-6mf5-m882 across PyPI dependencies, including transitive ones, and its impact-aware SCA ranks findings by whether your code actually calls the vulnerable path.