{"data":{"id":"a72a0528-1b6a-4fda-8a28-34540f29b6a9","title":"CVE-2025-2733: A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an…","summary":"CVE-2025-2733 is a critical vulnerability in mannaandpoem OpenManus up to 2025.3.13, affecting an unknown part of app/tool/python_execute.py in the Prompt Handler component. Manipulation leads to os command injection and can be initiated remotely. The exploit is publicly disclosed and may be used, and the vendor did not respond to early contact about the disclosure.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-2733","publishedAt":"2025-03-25T05:15:40.870Z","cveId":"CVE-2025-2733","cweIds":["CWE-77","CWE-78"],"cvssScore":"6.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["OpenManus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"OpenManus OS command injection in python_execute tool via prompt handler","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01513,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-h76m-8w3j-mgpm"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:44.584Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}