Lucene search
+L

7 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•31 views

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Advisory DetailsTitle: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgentDescription: SummaryLangroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluat...

10CVSS6.4AI score0.00912EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•30 views

PT-2026-59236

Advisory Details Title: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgent Description: Summary Langroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents...

10CVSS6.4AI score0.00912EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/09 11:51 p.m.•52 views

CVE-2026-54769 Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluate LLM-generated tool messages with...

10CVSS0.00912EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/09 11:51 p.m.•18 views

CVE-2026-54769 Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluate LLM-generated tool messages with...

10CVSS6.3AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/07/09 11:51 p.m.•14 views

CVE-2026-54769 Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluate LLM-generated tool messages with...

10CVSS6.3AI score0.00912EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/07/06 8:42 p.m.•28 views

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Advisory Details Title: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgent Description: Summary Langroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents...

10CVSS6.3AI score0.00912EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•44 views

PT-2026-56063

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.65.2 Description A sandbox escape exists in the TableChatAgent and VectorStore capabilities that allows unauthenticated remote code execution RCE on the host system. The issue occurs when agents evaluate...

10CVSS6.5AI score0.00912EPSS
SaveExploits0References16
Rows per page
Query Builder