CVE-2025-2733: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/pythonexecute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The...

OpenManus command injection vulnerability

OpenManus is an application by the individual developer of mannaandpoem. A command injection vulnerability exists in OpenManus version 2025.3.13 and earlier, which stems from an os command injection in the app/tool/pythonexecute.py file, which may be attacked remotely...

PT-2025-12695

Name of the Vulnerable Software and Affected Versions mannaandpoem OpenManus versions up to 2025.3.13 Description A critical issue has been discovered, affecting the Prompt Handler component, specifically the file app/tool/python execute.py. This issue leads to os command injection and can be...