Composio Command Execution vulnerability

🗓️ 08 Jan 2025 21:32:25Reported by GitHub Advisory DatabaseType

Composio versions 0.5.40 and above are vulnerable to Command Execution in specific functions.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-53526	8 Jan 202519:08	–	circl
CNNVD	Composio 安全漏洞	8 Jan 202500:00	–	cnnvd
CVE	CVE-2024-53526	8 Jan 202500:00	–	cve
Cvelist	CVE-2024-53526	8 Jan 202500:00	–	cvelist
EUVD	EUVD-2025-0213	3 Oct 202520:07	–	euvd
NVD	CVE-2024-53526	8 Jan 202519:15	–	nvd
OSV	CVE-2024-53526	8 Jan 202519:15	–	osv
OSV	GHSA-8H93-28HG-FJ84 Composio Command Execution vulnerability	8 Jan 202521:32	–	osv
Positive Technologies	PT-2025-2965 · Composio · Composio	8 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-53526	23 May 202507:15	–	redhatcve

Vulners

Node

composio-julepRange0.5.40–0.6.9pip

composio-openaiRange0.5.40–0.6.9pip

composio-claudeRange0.5.40–0.6.9pip

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-53526
github	www.github.com/ComposioHQ/composio/issues/1073
github	www.github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/claude/composio_claude/toolset.py
github	www.github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/julep/composio_julep/toolset.py
github	www.github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/openai/composio_openai/toolset.py
github	www.github.com/ComposioHQ/composio/pull/1107
github	www.github.com/ComposioHQ/composio/commit/f496f7fa776335ae7825cad2991c9b38923271fc
github	www.github.com/advisories/GHSA-8h93-28hg-fj84

31 Jan 2025 21:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.4

EPSS0.01019

SSVC