Remote Code Execution (RCE)

Embedchain is vulnerable to Remote Code Execution RCE. The vulnerability is due to insecure usage of yaml.load within the loaddata function of openapi.py, allowing an attacker to execute arbitrary code by supplying a crafted YAML file...