CVE-2025-12695 — Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox

CVE-2025-12695

Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox PUBLISHED

Description (CNA)

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0

CWE

CWE-653

References

https://research.jfrog.com/vulnerabilities/dspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.