PT-2025-45779 · Pypi · Dspy

Published 2025-11-04 · Updated 2025-11-04

OSV

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.

Fix

Weakness Enumeration

CWE-653

Related Identifiers

GHSA-VVW2-H478-XWR3

Affected Products

Dspy

References · 4

• https://osv.dev/vulnerability/GHSA-vvw2-h478-xwr3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12695 · Security Note
• https://github.com/stanfordnlp/dspy · Note
• https://research.jfrog.com/vulnerabilities/dspy-sandbox-escape-arbitrary-file-read-jfsa-2025-001495652 · Note