CVE-2026-25129
1 advisory.
Packagist/psy/psysh CVE-2026-25129: medium 6.7, EPSS 0.33%
PsySH has Local Privilege Escalation via CWD .psysh.php auto-load
Action: Upgrade psy/psysh to 0.11.23 or later.
composer require psy/psysh:0.12.19composer require psy/psysh:0.11.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.12.0 | 0.12.19 | - |
| 0 | 0.11.23 | - |
Fixed versions
| 0.12.19 | 0.11.23 |
Sources
- osv: GHSA-4486-gxhx-5mg7
- https://github.com/bobthecow/psysh/security/advisories/GHSA-4486-gxhx-5mg7
- https://nvd.nist.gov/vuln/detail/CVE-2026-25129
- https://github.com/bobthecow/psysh
- https://github.com/bobthecow/psysh/releases/tag/v0.11.23
- https://github.com/bobthecow/psysh/releases/tag/v0.12.19
CVE-2026-25129 · published · modified · JSON