{"data":{"id":"fcb610fa-a5cf-4dbf-a3cf-60a372a488b1","title":"GHSA-q9p7-wqxg-mrhc: Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent","summary":"Langroid's TableChatAgent and VectorStore evaluate LLM-generated tool messages with eval() when full_eval=True, passing an empty dictionary as locals. Because __builtins__ is not removed from the globals mapping, expressions such as __import__('os').system(...) execute, allowing a prompt-injected attacker to achieve unauthenticated remote code execution on the host. The flaw is located in /langroid/agent/special/table_chat_agent.py around line 239 and /langroid/vector_store/base.py around line 225.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-q9p7-wqxg-mrhc","publishedAt":"2026-07-06T20:42:00.000Z","cveId":"CVE-2026-54769","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection","other"],"issueType":"vulnerability","affectedPackages":["langroid@<= 0.65.1 (fixed: 0.65.2)"],"affectedPackageNames":["langroid"],"affectedPackageRefs":["pypi:langroid"],"affectedVendors":[],"affectedVendorsRaw":["Langroid","TableChatAgent","DeepSeek"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00912,"epssCheckedAt":"2026-10-14T18:06:00.492Z","kevDateAdded":null,"advisoryAliases":["GHSA-q9p7-wqxg-mrhc"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-07-06T20:42:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.97,"researchCategory":null,"atlasIds":["AML.T0051"]}}