CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526

CVE-2024-53526 affects the Composio suite: versions 0.5.40 and later are vulnerable to arbitrary command execution via the handle_tool_calls function in the modules composio_openai, composio_claude, and composio_julep. The root cause is improper input sanitization enabling command injection. Impa...