CVE-2026-54769

Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution (RCE) in its `TableChatAgent` and `VectorStore` capabilities. When these agents evaluate LLM-generated tool messages with `full_eval=True`, they attempt to sandbox the execution by explicitly setting `locals` to an empty dictionary `{}` inside Python's `eval()` function. However, this relies on an incomplete understanding of Python's execution model. Because `__builtins__` is not explicitly scrubbed from the `globals` dictionary mapping, Python implicitly injects all built-ins during execution, granting full access to functions like `__import__('os').system()`. Since `TableChatAgent.pandas_eval()` executes external LLM outputs natively, this bypass permits any attacker providing prompt payload to achieve unauthenticated RCE on the host system. Version 0.65.2 patches the issue.

• CWE-94

• https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc
• https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc

Published

Jul 10, 2026

Last Modified

Jul 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54763Traefik is an HTTP reverse proxy and load balancer. Prior to…10
• CVE-2026-54764Traefik is an HTTP reverse proxy and load balancer. Prior to…5.8
• CVE-2026-54765Traefik is an open source HTTP reverse proxy and load balanc…8.5
• CVE-2026-54766Vikunja is an open-source self-hosted task management platfo…5.3
• CVE-2026-54767WeGIA is a web manager for charitable institutions. Prior to…9.1
• CVE-2026-54768WPGraphQL provides a GraphQL API for WordPress sites. From 2…6.9
• CVE-2026-5477An integer overflow existed in the wolfCrypt CMAC implementa…7.5
• CVE-2026-54770WebOb provides objects for HTTP requests and responses. Prio…6.1
• CVE-2026-54771Langroid is a framework for building large-language-model-po…8.1
• CVE-2026-54772CoreWCF is a port of the service side of Windows Communicati…7.5
• CVE-2026-54773CoreWCF is a port of the service side of Windows Communicati…5.9
• CVE-2026-54774CoreWCF is a port of the service side of Windows Communicati…7.4