PYSEC-2026-1756 PaddlePaddle command injection in paddle.utils.download._wget_download

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

PT-2024-14518 · Unknown · Paddlepaddle

Name of the Vulnerable Software and Affected Versions: PaddlePaddle versions prior to 2.6.0 Description: The issue is a command injection in the wget download function, allowing the execution of arbitrary commands on the operating system. Recommendations: For versions prior to 2.6.0, update to...