CVE-2025-5030 | Ackites KillWxapkg up to 2.4.1 wxapkg File Parser unpack.go processFile os command injection (Issue 85)

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been declared as critical. This vulnerability affects the function processFile of the file internal/unpack/unpack.go of the component wxapkg File Parser. The manipulation leads to os command injection.

This vulnerability was named CVE-2025-5030. The attack can be initiated remotely. Furthermore, there is an exploit available.