CVE-2025-12695
Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox
- State
- Published
- Severity
- 5.9 Medium
- Published
- Nov 4, 2025
- Updated
- Nov 4, 2025
- Reserved
- Nov 4, 2025
Description
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | JFROG |
Weaknesses
- CWE-653 Improper Isolation or Compartmentalization
Affected Products
| Product | Versions |
|---|---|
dspy |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.