PT-2025-44999 · Dspy · Dspy

CVE-2025-12695 · Published 2025-11-04 · Updated 2026-07-07

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions DSPy (affected versions not specified)

Description An overly permissive sandbox configuration in DSPy can allow attackers to steal sensitive files. This occurs when users create an AI agent that processes user input and utilizes the “PythonInterpreter” class. The issue stems from an insecure configuration that does not adequately restrict access to system resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

CVE-2025-12695

GHSA-VVW2-H478-XWR3

PYSEC-2026-1318

Affected Products

Dspy

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-12695 · Security Note
• https://osv.dev/vulnerability/GHSA-vvw2-h478-xwr3 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-1318 · Vendor Advisory
• https://github.com/stanfordnlp/dspy · Note
• https://github.com/advisories/GHSA-vvw2-h478-xwr3 · Note
• https://research.jfrog.com/vulnerabilities/dspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652 · Note
• https://pypi.org/project/dspy · Note
• https://t.me/CVEtracker/36513 · Telegram Post