CVE-2025-46725

Langroid is a Python framework to build large language model LLM-powered applications. Prior to version 0.53.15, "LanceDocChatAgent" uses pandas eval through "computefromdocs". As a result, an attacker may be able to make the agent run malicious commands through "QueryPlan.dataframecalc"...

CVE-2025-46725: Improper Control of Generation of Code

Langroid is a Python framework to build large language model LLM-powered applications. Prior to version 0.53.15, LanceDocChatAgent uses pandas eval through computefromdocs. As a result, an attacker may be able to make the agent run malicious commands through QueryPlan.dataframecalc compromising t...