{"data":{"id":"b2d1d938-b056-4faa-b8b3-0ca3424d94f7","title":"CVE-2025-12695: The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build…","summary":"CVE-2025-12695 is an overly permissive sandbox configuration in DSPy. It allows attackers to steal sensitive files when users build an AI agent that consumes user input and uses the \"PythonInterpreter\" class. The weakness is classified as CWE-653, Improper Isolation or Compartmentalization, and was reported by JFrog.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-12695","publishedAt":"2025-11-04T19:15:34.087Z","cveId":"CVE-2025-12695","cweIds":["CWE-653"],"cvssScore":"5.9","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["dspy@<= 3.0.3"],"affectedPackageNames":["dspy"],"affectedPackageRefs":["pypi:dspy"],"affectedVendors":[],"affectedVendorsRaw":["DSPy","PythonInterpreter"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"DSPy sandbox configuration allows arbitrary file read via PythonInterpreter","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00338,"epssCheckedAt":"2026-11-04T12:08:35.257Z","kevDateAdded":null,"advisoryAliases":["GHSA-vvw2-h478-xwr3"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:10.630Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null,"fixes":[]}}