Data Loss Prevention and endpoint
CVE-2025-14026: Vulnerable Python version used in Forcepoint One DLP Client
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Forcepoint One Endpoint (F1E) 23.11 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
Forcepoint One DLP Client, version 23.04.5642 (and possibly newer versions), includes a restricted version of Python 2.5.4 that prevents use of the ctypes library. ctypes is a foreign function interface (FFI) for Python, enabling calls to DLLs/shared libraries, memory allocation, and direct code execution. It was demonstrated that these restrictions could be bypassed.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.