Remote Code Execution Flaw Found in Glob File Matching Library

First seen 2 Dec 2025, 18:33 UTC • Theregister

•94% similarity •43

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Researchers have identified a remote code execution vulnerability in the glob file pattern matching library's CLI tool. This flaw, which has existed for years, affects users who utilize the tool's –c flag to execute commands on matching files. Users are urged to update their installations to mitigate potential risks.

ThreatCluster AI How this analysis works

Attack Flow

12 entities, 18 inferred relationships (STIX 2.1).

Threat Actor (2)

PlushDaemon
Clop

Technique (3)

Data Breach
Man-in-the-Middle
Ransomware

Organization (1)

Cox Enterprises

Vulnerability (1)

CVE-2025-64756

Malware (1)

EdgeStepper

Affected Platform (3)

BSD
Linux
MacOS

Tool (1)

Glob

Relationships

PlushDaemon uses EdgeStepper
Clop uses EdgeStepper
PlushDaemon uses Glob
Clop uses Glob
PlushDaemon uses Data Breach
PlushDaemon uses Man-in-the-Middle
PlushDaemon uses Ransomware
Clop uses Data Breach
Clop uses Man-in-the-Middle
Clop uses Ransomware
EdgeStepper exploits CVE-2025-64756
Glob exploits CVE-2025-64756
CVE-2025-64756 targets BSD
CVE-2025-64756 targets Linux
CVE-2025-64756 targets MacOS
PlushDaemon targets Cox Enterprises
Clop targets Cox Enterprises
EdgeStepper targets Cox Enterprises

Community

Browse all →

Tracked Entities in This Story

PlushDaemon Clop EdgeStepper Cox Enterprises BSD Linux MacOS

Remote Code Execution Flaw Found in Glob File Matching Library

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading

Tracked Entities in This Story