What’s Vulnerable › Vulnerabilities
CVE-2024-12652: Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')
- Severity: high (CVSS 8.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-12-26 · updated 2026-06-17
- Weakness: CWE-94
Description
A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code.
Affected products
- INTUMIT SmartRobot: before 7.2.0 — fixed in 7.2.0
How to fix
Upgrade to a fixed version: INTUMIT SmartRobot 7.2.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-12652 or the next vulnerability affects your stack