Arbitrary Code Execution

pandasai is vulnerable to Arbitrary Code Execution. An attacker is able to exploit this vulnerability by sending a specially crafted request to the Pandas-AI server. This request would cause the server to execute arbitrary code with the privileges of the root user. The vulnerability exists in _is_jailbreak() function which is used to determine if the current user is running in a restricted environment. The flaw allows the attacker to bypass the restricted environment and execute arbitrary code.