Description (CNA)
A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the argument input_model leads to code injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| defog-ai / introspect | affected 0.1.0; affected 0.1.1; affected 0.1.2; affected 0.1.3; affected 0.1.4 |
CWE
CWE-94, CWE-74
References
- https://vuldb.com/?id.309068
- https://vuldb.com/?ctiid.309068
- https://vuldb.com/?submit.571363
- https://github.com/defog-ai/introspect/issues/496
- https://github.com/defog-ai/introspect/issues/496#issue-3036183861
ADP enrichment
No English description supplied.
No references supplied.