Vulnerability · Published May 25, 2025 · Assigned by VulDB

CVE-2025-5150docarray Web API torch_dataset.py getitem prototype pollution

Medium 6.3

In plain English

A medium-severity prototype pollution in docarray. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.7%top 45.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function __getitem__ of the file /docarray/data/torch_dataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	docarray	no fix listed	GHSA-j9wp-865g-rf48
PyPI	docarray	no fix listed	PYSEC-2026-1308

Affected products (as reported)

Vendor	Product	Versions
n/a	docarray	0.40.00.40.1

Weakness: CWE-1321, CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

VDB-310238 | docarray Web API torch_dataset.py __getitem__ prototype pollution vdb-entry, technical-description
VDB-310238 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #574696 | docarray 0.40.1 Improperly Controlled Modification of Object Prototype Attribute third-party-advisory
https://gist.github.com/superboy-zjc/56502343bcb12eb653081b426debf2c8 exploit