CVE-2019-15149: Networkgenomics Mitogen

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism

Affected products

• Networkgenomics Mitogen: before 0.2.8 (fixed in 0.2.8)

Published 2019-08-18. Last modified 2026-06-17.