CVE-2025-1497

PlotAI contains a vulnerability (CVE-2025-1497) where lack of validation of LLM-generated output can allow an attacker to execute arbitrary Python code (RCE). The issue affects PlotAI as described in multiple sources; the vendor has commented out the vulnerable line and states that further use re...