Nixpkgs security tracker
Untriaged
Permalink
CVE-2025-9959
7.6 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): HIGH
- Availability impact (A): LOW
Sandbox escape in smolagents Local Python execution environment via dunder attributes
Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.
References
Affected products
smolagents
- <1.21.0
Matching in nixpkgs
pkgs.python312Packages.smolagents
Barebones library for agents
pkgs.python313Packages.smolagents
Barebones library for agents
pkgs.pkgsRocm.python3Packages.smolagents
Barebones library for agents
Package maintainers
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>