CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526: Improper Neutralization of Special Elements used in a Command

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526

The composio library (version >=0.5.40 ) is vulnerable to Command Execution within the composio_openai , composio_claude , and composio_julep components. The root cause is located in the handle_tool_calls function. While technical details regarding the specific exploit vector are not explicitl...