The flaw, identified as CVE-2025-47934 and assigned a critical severity rating, was discovered by Edoardo Geraci and Thomas ...

The attack’s success hinged on exploiting the assumed safety of open-source tools and the ease of impersonating legitimate ...