38 matches found
PT-2026-117950
Name of the Vulnerable Software and Affected Versions DB-GPT versions prior to 0.8.3 Description An unauthenticated remote code execution issue exists because the /api/v1/chat/react-agent endpoint uses a mock get user from headers function that assigns the admin role to all callers regardless of...
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
SummaryThe AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...
EUVD-2026-48422
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK installpackages...
CVE-2026-16796
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
CVE-2026-16796
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
PT-2026-64164
Name of the Vulnerable Software and Affected Versions AWS Bedrock AgentCore Python SDK versions prior to 1.18.1 Description Improper neutralization of argument delimiters in the install packages method allows a remote authenticated user to execute arbitrary commands within the Code Interpreter...
CVE-2026-16796: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate this issue, user...
CVE-2026-59216 Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...
CVE-2026-59216 Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...
CVE-2026-59216 Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, geteventcall delivered execute:python and execute:tool Socket.IO events to a client-supplied sessionid after checking only that the session was connected, allowing authenticated users who learne...
CVE-2026-59216
Open WebUI prior to 0.10.0 is vulnerable to cross-user code execution via unvalidated Socket.IO event-caller session_id. The get_event_call path delivers execute:python and execute:tool events to a client-supplied session_id after only confirming the session is connected, enabling an attacker who...
PT-2026-56882
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description Authenticated users can execute Python code or tools within another user's session. This occurs because the get event call function delivers execute:python and execute:tool Socket.IO events to a...
gpt-code-interpreter (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-55443 via langchain (0.0.238)
langchain PYPI version 0.0.238 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gpt-code-interpreter =0.0.2, =0.0.3 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
EUVD-2026-37802
Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK installpackages...
CVE-2026-12530
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK versions = 1.1.3 and 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate thi...
CVE-2026-12530
The issue CVE-2026-12530 affects the AWS Bedrock AgentCore Python SDK install_packages() in versions >= 1.1.3 and
CVE-2026-12530: Improper Neutralization of Argument Delimiters in a Command
Improper neutralization of argument delimiters in the installpackages method in AWS Bedrock AgentCore Python SDK versions = 1.1.3 and 1.6.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitigate thi...
gpt-code-interpreter (>=0.0.2, <=0.0.3) potentially affected by CVE-2026-55443 via langchain (0.0.238)
langchain PYPI version 0.0.238 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gpt-code-interpreter =0.0.2, =0.0.3 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
codeinterpreterapi (>=0.0.9, <=0.0.11), codeinterpreterapi-hyperobjekt (>=0.0.11, <=0.0.16) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.242)
langchain PYPI version 0.0.242 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - codeinterpreterapi =0.0.9, =0.0.11, =0.0.9, =0.2.4, =0.1.5, =0.1.8 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
