CVE-2025-9959 — Sandbox escape in smolagents Local Python execution environment via dunder attributes
Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt…
Published: 2025-09-03 · CVSS: 7.6 · CVSS 3.1
Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7