Remote Code Execution Flaw Discovered in Glob File Matching Library

First seen 23 Nov 2025, 23:24 UTC • Theregister

•94% similarity •60

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Researchers have identified a remote code execution vulnerability in the glob file pattern matching library, specifically within the command-line interface (CLI) tool's –c flag. This flaw affects users who utilize glob, which is commonly integrated into JavaScript applications. Users are urged to update their installations to mitigate potential exploitation.

ThreatCluster AI

Attack Flow

12 entities, 18 inferred relationships (STIX 2.1).

Threat Actor (2)

PlushDaemon
Clop

Technique (3)

Data Breach
Man-in-the-Middle
Ransomware

Organization (1)

Cox Enterprises

Vulnerability (1)

CVE-2025-64756

Malware (1)

EdgeStepper

Affected Platform (3)

BSD
Linux
MacOS

Tool (1)

Glob

Relationships

PlushDaemon uses EdgeStepper
Clop uses EdgeStepper
PlushDaemon uses Glob
Clop uses Glob
PlushDaemon uses Data Breach
PlushDaemon uses Man-in-the-Middle
PlushDaemon uses Ransomware
Clop uses Data Breach
Clop uses Man-in-the-Middle
Clop uses Ransomware
EdgeStepper exploits CVE-2025-64756
Glob exploits CVE-2025-64756
CVE-2025-64756 targets BSD
CVE-2025-64756 targets Linux
CVE-2025-64756 targets MacOS
PlushDaemon targets Cox Enterprises
Clop targets Cox Enterprises
EdgeStepper targets Cox Enterprises

Community

Browse all →

Remote Code Execution Flaw Discovered in Glob File Matching Library

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading