Lucene search
+L

11 matches found

Mend
Mend
•added 2026/03/30 3:50 p.m.•6 views

CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

9.6CVSS6.3AI score0.00442EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/03/30 3:50 p.m.•11 views

CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

6.3AI score0.00442EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/30 3:50 p.m.•48 views

CVE-2026-2275 CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

0.00442EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/30 3:50 p.m.•8 views

CVE-2026-2275 CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

6.3AI score0.00442EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•9 views

CVE-2026-2275: Exposed Dangerous Method or Function

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

9.6CVSS6.3AI score0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:10 a.m.•14 views

CVE-2024-10950 Code Injection in binary-husky/gpt_academic

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS9.2AI score0.01508EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 10:10 a.m.•62 views

CVE-2024-10950

CVE-2024-10950 affects binary-husky/gpt_academic ≤ 3.83, via the CodeInterpreter plugin. The root cause is prompt injection that causes untrusted prompts to generate code executed without a sandbox, enabling remote code execution (RCE) on the application backend server. The described impact is fu...

8.8CVSS8.3AI score0.01508EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•26 views

CVE-2024-10950 Code Injection in binary-husky/gpt_academic

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS0.01508EPSS
SaveExploits1References1
Mend
Mend
•added 2025/03/20 10:10 a.m.•10 views

CVE-2024-10950

In binary-husky/gptacademic version = 3.83, the plugin "CodeInterpreter" is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code...

8.8CVSS0.01508EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•8 views

PT-2025-12083

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic versions = 3.83 Description The issue is caused by the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. This can be exploite...

8.8CVSS0.01508EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•12 views

CVE-2024-10950: Improper Control of Generation of Code

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS8.3AI score0.01508EPSS
SaveExploits1References1
Rows per page
Query Builder