CVE-2025-9959

CVE-2025-9959 concerns smolagents, a Python agents library. The root issue is incomplete validation of dunder attributes, enabling an attacker to escape the Local Python execution environment sandbox when a Prompt Injection is used to coax the agent into creating malicious code. Several connected...