PYSEC-2026-1318 DSPy does not properly restrict file reads

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...

CVE-2025-12695: Improper Isolation or Compartmentalization

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...

PT-2025-44999

Name of the Vulnerable Software and Affected Versions DSPy affected versions not specified Description An overly permissive sandbox configuration in DSPy can allow attackers to steal sensitive files. This occurs when users create an AI agent that processes user input and utilizes the...