CVE-2017-9149: Metadata Anonymisation Toolkit Project Metadata Anonymisation Toolkit

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation from the Nautilus contextual menu, which allows context-dependent attackers to obtain sensitive information by reading a file for which cleaning had been attempted.

Affected products

• Metadata Anonymisation Toolkit Project Metadata Anonymisation Toolkit: version 0.6 only; version 0.6.1 only

Published 2017-05-22. Last modified 2026-06-17.