GitHub Advisoryadvisory · PyPI

GHSA-r6hf-g5x6-7pv9 Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism

CRITICAL Published 2026-05-12 Modified 2026-10-27 Official page ↗
Aliases
CVE-2026-31233
Ecosystem
PyPI
Packages
guardrails-ai
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-94
Reviewed
2026-05-27

Affected packages

• PyPI guardrails-ai: <= 0.6.7 (no fix yet)

Description

Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validator packages via guardrails hub install, the system retrieves a manifest from the Guardrails Hub and dynamically executes a script specified in the post_install field. The script path is constructed from untrusted manifest data and executed without proper validation or sanitization, allowing remote code execution. An attacker who can publish malicious packages to the Hub can inject arbitrary code that will be executed on any system where a victim installs the malicious package.

Related

Alias · CVE (1)

  • CVE-2026-31233 Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References