Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/13 3:46 p.m.•31 views

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Advisory DetailsTitle: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgentDescription: SummaryLangroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluat...

10CVSS6.4AI score0.00912EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•30 views

PT-2026-59236

Advisory Details Title: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgent Description: Summary Langroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents...

10CVSS6.4AI score0.00912EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/09 11:51 p.m.•53 views

CVE-2026-54769 Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluate LLM-generated tool messages with...

10CVSS0.00912EPSS
SaveExploits0References1
Rows per page
Query Builder