PT-2024-31815 · Guardrails Ai · Guardrails Ai Guardrails Framework

Leo Ring · Published 2024-09-18 · Updated 2024-09-20 · CVE-2024-45858

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Guardrails AI Guardrails framework versions 0.2.9 through 0.5.10

Description An arbitrary code execution issue exists due to the way the Guardrails AI Guardrails framework validates XML files. If a maliciously crafted XML file containing Python code is loaded, the code will be executed on the user's machine because it is passed to an eval function.

Recommendations For Guardrails AI Guardrails framework versions 0.2.9 through 0.5.10, consider disabling the XML validation feature until a patch is available to prevent potential code execution. Restrict access to loading XML files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Eval Injection

Weakness Enumeration

CWE-95

Related Identifiers

CVE-2024-45858

GHSA-W392-75Q8-VR67

Affected Products

Guardrails Ai Guardrails Framework

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-45858 · Security Note
• https://osv.dev/vulnerability/GHSA-w392-75q8-vr67 · Vendor Advisory
• https://github.com/guardrails-ai/guardrails · Note
• https://github.com/guardrails-ai/guardrails/commit/ab12701e8c3ef41273ff9b3912f2e4e28ae8306f · Note
• https://twitter.com/CVEnew/status/1836424253656437000 · Twitter Post
• https://t.me/latest_high_impact_cve/1172 · Telegram Post
• https://hiddenlayer.com/sai-security-advisory/2024-09-guardrails · Note