Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote Code Execution (RCE) in its `TableChatAgent` and `VectorStore` capabilities. When these agents evaluate LLM-generated tool messages with `full_eval=True`, they attempt to sandbox the execution by explicitly setting `locals` to an empty dictionary `{}` inside Python's `eval()` function. However, this relies on an incomplete understanding of Python's execution model. Because `__builtins__` is not explicitly scrubbed from the `globals` dictionary mapping, Python implicitly injects all built-ins during execution, granting full access to functions like `__import__('os').system()`. Since `TableChatAgent.pandas_eval()` executes external LLM outputs natively, this bypass permits any attacker providing prompt payload to achieve unauthenticated RCE on the host system. Version 0.65.2 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-09 | 1 | Patch1 |
| 2026-07-10 | 3 | Discl1Disclosure2 |
CVE-2026-54769 Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote… https://www.cve.org/CVERecord?id=CVE-2026-54769
Post summary
The post announces the CVE-2026-54769 sandbox escape vulnerability in Langroid prior to version 0.65.2, describing it as a critical issue but offers no PoC, exploit code, or mitigation details.
🚨*CVE* CVE-2026-54769 Langroid is a framework for building large-language-model-powered applications. Versions prior to 0.65.2 are vulnerable to a critical Sandbox Escape leading to Remote… https://www.cve.org/CVERecord?id=CVE-2026-54769 ----- Traducción: CVE-2026-54769 Lan… http://infoflow.cloud`
Post summary
CVE-2026-54769 reports a critical sandbox escape in Langroid versions before 0.65.2 that can lead to remote exploitation.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-54769](https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc) La... https://github.com/langroid/langroid/security/advisories/GHSA-q9p7-wqxg-mrhc #Vulnerability #CVE #ZeroDay
Post summary
A new vulnerability CVE-2026-54769 has been disclosed via a GitHub advisory link; no exploitation, patch, or technical details are provided.
🐍 Sandbox escape to RCE in Langroid's TableChatAgent — incomplete eval() mitigation lets unauthenticated attackers break out and execute code remotely. CVSS 10. CVE-2026-54769 — patch now if you use langroid. #AppSec #Python https://secalerts.co/vulnerability/CVE-2026-54769?utm_campaign=x https://t.co/px4Xk0Lnth
Post summary
The tweet announces CVE-2026-54769, describes a sandbox escape leading to remote code execution in Langroid's TableChatAgent, and urges users to apply the available patch.