PT-2026-40120 · Unknown · Guardrails Ai

CVE-2026-31233 · Published 2026-05-12 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Guardrails AI versions prior to 0.6.8

Description A code injection issue exists in the Hub package installation mechanism. When installing validator packages using the command guardrails hub install, the system retrieves a manifest from the Guardrails Hub and dynamically executes a script defined in the post install field. Because the script path is constructed from untrusted manifest data and executed without proper validation or sanitization, it allows for remote code execution. An attacker capable of publishing malicious packages to the Hub can inject arbitrary code that executes on any system where a victim installs the malicious package.

Recommendations Update to version 0.6.8 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-31233

GHSA-R6HF-G5X6-7PV9

PYSEC-2026-347

Affected Products

Guardrails Ai

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-31233 · Security Note
• https://osv.dev/vulnerability/GHSA-r6hf-g5x6-7pv9 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-347 · Vendor Advisory
• https://github.com/guardrails-ai/guardrails · Note
• https://notion.so/CVE-2026-31233-35d1e13931888142a954fb3f50ee0c94 · Note
• https://pypi.org/project/guardrails-ai · Note
• https://github.com/advisories/GHSA-r6hf-g5x6-7pv9 · Note