NIXPKGS-2025-0005

published on 1 Nov 2025

Permalink CVE-2025-9959

7.6 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): NONE
User interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): HIGH
Availability impact (A): LOW

updated 4 months, 3 weeks ago by @LeSuisse Activity log

Created automatic suggestion 6 months, 1 week ago
@LeSuisse accepted 4 months, 3 weeks ago
@LeSuisse published on GitHub 4 months, 3 weeks ago

Sandbox escape in smolagents Local Python execution environment via dunder attributes

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.

References

https://research.jfrog.com/vulnerabilities/smolagents-local-python-sandbox-esca… third-party-advisory
https://github.com/huggingface/smolagents/pull/1551 patch

Affected products

smolagents

<1.21.0

Matching in nixpkgs

pkgs.python312Packages.smolagents

Barebones library for agents

nixos-unstable -
- nixpkgs-unstable 1.21.3

pkgs.python313Packages.smolagents