Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/05/07 3:5 a.m.13 views

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

5.3CVSS7.8AI score0.00182EPSS
Exploits0References1
NVD
NVD
added 2025/05/05 4:15 a.m.11 views

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

5.3CVSS0.00182EPSS
Exploits0References5
Snyk
Snyk
added 2025/05/05 3:43 a.m.2 views

Arbitrary Code Injection

Overview factool is a Factuality Detection for Generative AI Affected versions of this package are vulnerable to Arbitrary Code Injection through the runsingle and run functions in the class pythonexecutor due to using the exec function to execute user-provided input without any form of validatio...

5.3CVSS7.9AI score0.00182EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/05 3:0 a.m.4 views

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

5.3CVSS7.5AI score0.00182EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/05/05 3:0 a.m.13 views

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

5.3CVSS0.00182EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.2 views

factool 注入漏洞

factool is a GAIR open source tool enhancement framework for detecting factual errors in text generated by large language models such as ChatGPT. An injection vulnerability exists in factool, which stems from a code injection vulnerability in the function runsingle in the file...

5.3CVSS5.8AI score0.00182EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/05/05 12:0 a.m.4 views

PT-2025-19336 · Unknown · Gair-Nlp Factool

Name of the Vulnerable Software and Affected Versions: GAIR-NLP factool versions up to 3f3914bc090b644be044b7e0005113c135d8b20f Description: A critical issue has been found in GAIR-NLP factool, affecting the run single function of the file factool/factool/math/tool.py. This issue leads to code...

5.3CVSS5.3AI score0.00182EPSS
Exploits0References10
Rows per page
Query Builder