CVE-2024-4343

A Python command injection vulnerability exists in the SagemakerLLM class's complete() method within ./private_gpt/components/llm/custom/sagemaker.py of the imartinez/privategpt application, versions up to and including 0.3.0. The vulnerability arises due to the use of the eval() function to parse ...