Lucene search
+L

8 matches found

attackerkb
attackerkb
•added 2026/03/30 3:50 p.m.•7 views

CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

6AI score0.00442EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/30 3:50 p.m.•6 views

CVE-2026-2275 CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

6AI score0.00442EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/03/30 3:50 p.m.•43 views

CVE-2026-2275 CVE-2026-2275

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

0.00442EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/30 12:00 a.m.•0 views

CVE-2026-2275: Exposed Dangerous Method or Function

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling...

9.6CVSS5.9AI score0.00442EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:10 a.m.•10 views

CVE-2024-10950 Code Injection in binary-husky/gpt_academic

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS9.2AI score0.01508EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/03/20 10:10 a.m.•18 views

CVE-2024-10950 Code Injection in binary-husky/gpt_academic

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS0.01508EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 10:10 a.m.•57 views

CVE-2024-10950

CVE-2024-10950 affects binary-husky/gpt_academic ≤ 3.83, via the CodeInterpreter plugin. The root cause is prompt injection that causes untrusted prompts to generate code executed without a sandbox, enabling remote code execution (RCE) on the application backend server. The described impact is fu...

8.8CVSS9.2AI score0.01508EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•1 views

CVE-2024-10950: Improper Control of Generation of Code

In binary-husky/gptacademic version = 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt injection. The root cause is the execution of user-provided prompts that generate untrusted code without a sandbox, allowing the execution of parts of the LLM-generated code. Th...

8.8CVSS8.3AI score0.01508EPSS
SaveExploits1References1
Rows per page
Query Builder