CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

Composio security vulnerabilities

Composio is a production-ready toolset for AI agents open-sourced by Composio. Composio has a security vulnerability that stems from the ease of executing commands in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526: Improper Neutralization of Special Elements used in a Command

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...