CVE-2026-31233

Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validator packages via guardrails hub install, the system retrieves a manifest from the Guardrails Hub and dynamically executes a script specified in the post_install field. The script path is constructed from untrusted manifest data and executed without proper validation or sanitization, allowing remote code execution. An attacker who can publish malicious packages to the Hub can inject arbitrary code that will be executed on any system where a victim installs the malicious package.

• CWE-94

• https://github.com/guardrails-ai/guardrails
• https://www.notion.so/CVE-2026-31233-35d1e13931888142a954fb3f50ee0c94

Published

May 12, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31226The TinyZero project thru commit 6652a63c57fa7e5ccde3fc9c598…9.8
• CVE-2026-31228The Adversarial Robustness Toolbox (ART) thru 1.20.1 contain…9.8
• CVE-2026-31229The Adversarial Robustness Toolbox (ART) thru 1.20.1 contain…9.8
• CVE-2026-31230The Adversarial Robustness Toolbox (ART) thru 1.20.1 contain…9.8
• CVE-2026-31231Cognee thru v0.4.0 contains a critical remote code execution…9.8
• CVE-2026-31232The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996…8.8
• CVE-2026-31234Horovod thru 0.28.1 contains an insecure deserialization vul…9.8
• CVE-2026-31235The imgaug library thru 0.4.0 contains an insecure deseriali…9.8
• CVE-2026-31236The llm CLI tool thru 0.27.1 contains a critical code inject…9.8
• CVE-2026-31237The Ludwig framework thru 0.10.4 is vulnerable to insecure d…9.8
• CVE-2026-31238The Ludwig framework thru 0.10.4 is vulnerable to insecure d…9.8
• CVE-2026-31239The mamba language model framework thru 2.2.6 is vulnerable …9.8