GitHub Advisoryadvisory · PyPI

GHSA-vvw2-h478-xwr3 DSPy does not properly restrict file reads

MEDIUM Published 2025-11-04 Modified 2025-11-04 Official page ↗
Aliases
CVE-2025-12695
Ecosystem
PyPI
Packages
dspy
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-653
Reviewed
2025-11-04

Affected packages

• PyPI dspy: <= 3.0.3 (no fix yet)

Description

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.

Related

Alias · CVE (1)

  • CVE-2025-12695 The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which… vulnerability

Weakness · CWE (1)

  • CWE-653 Improper Isolation or Compartmentalization weakness

References