CVE-2025-67485: Machphy Mad-Proxy

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies. Versions 0.3 and below allow attackers to bypass HTTP/HTTPS traffic interception rules, potentially exposing sensitive traffic. This issue does not have a fix at the time of publication.

Affected products

• Machphy Mad-Proxy: up to and including 0.3

Published 2025-12-10. Last modified 2026-06-17.