Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
References
| Link | Resource |
|---|---|
| https://kb.cert.org/vuls/id/420440 | Third Party Advisory |
| https://support.forcepoint.com/s/article/000042256 | Permissions Required |
| https://www.kb.cert.org/vuls/id/420440 | Third Party Advisory |
Configurations
History
10 Feb 2026, 19:31
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://kb.cert.org/vuls/id/420440 - Third Party Advisory | |
| References | () https://support.forcepoint.com/s/article/000042256 - Permissions Required | |
| References | () https://www.kb.cert.org/vuls/id/420440 - Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:forcepoint:one_data_loss_prevention:23.04.5642:*:*:*:*:*:*:* | |
| First Time |
Forcepoint
Forcepoint one Data Loss Prevention |
Information
Published : 2026-01-06 15:15
Updated : 2026-02-10 19:31
NVD link : CVE-2025-14026
Mitre link : CVE-2025-14026
CVE.ORG link : CVE-2025-14026
JSON object : View
Products Affected
forcepoint
- one_data_loss_prevention
CWE