Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/05/12 6:30 p.m.16 views

PySyft server-side arbitrary Python execution after code approval

PySyft Syft Datasite/Server versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions via @sy.syftfunction for remote execution on the server. While a...

9.8CVSS6.7AI score0.00631EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder