Threats tagged 'ghsa-p8v6-48p4-f4r4'

CVE-2025-9959 is a high-severity vulnerability involving improper control of code generation (CWE-94) in a Local Python execution environment sandbox enforced by smolagents. It arises from incomplete validation of dunder attributes, allowing an attacker to escape the sandbox. Exploitation requires a prompt injection to trick the agent into creating malicious code.