The banks library versions prior to 2.4.3 contain a remote code execution vulnerability due to unsafe use of importlib.import_module and getattr on attacker-controlled import_path values in Tool JSON objects parsed from template bodies. This allows an attacker who can influence prompt content to execute arbitrary Python code in the hosting process. The vulnerability is distinct from a prior sandboxing fix and remains exploitable in version 2.4.2. A fix is available in version 2.4.3.