CVE-2026-42079Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-95

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-04: 2Technical Details · 2026-05-04: 205-04
Signal classification1 categories
Disclosure
2100.0%
Referenced assets3 URLs
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-42079 Arbitrary Code Execution in PPTAgent via Python eval() Pr... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42079 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2

    Post summary

    The post briefly announces CVE-2026-42079—a flaw allowing arbitrary code execution in PPTAgent via Python eval—without providing a PoC, exploit script, or patch information.

    0000049
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-42079 PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() o… https://www.cve.org/CVERecord?id=CVE-2026-42079

    Post summary

    The entry announces CVE‑2026‑42079, describing a Python eval()‑based arbitrary code execution flaw in PPTAgent before commit 418491a, without providing PoC, exploit, or mitigation details.

    00000104
    57.4K followersView on X

Explore more