DSPy versions up to 3.0.3 have an overly permissive sandbox configuration that allows attackers to read sensitive files when users build AI agents using the PythonInterpreter class. This vulnerability could lead to unauthorized disclosure of sensitive information.