Threats tagged 'brew-llm-cve-2026-31236'

The llm CLI tool up to version 0.27.1 has a critical code injection vulnerability in its --functions command-line argument. This argument allows users to input custom Python function definitions, but the tool unsafely executes this code using Python's exec() without any sanitization or restrictions. An attacker can exploit this by tricking a user into running a malicious command with arbitrary Python code, resulting in arbitrary code execution on the victim's system and potentially full system compromise. The vulnerability is fixed in version 0.28.