What’s Vulnerable › Vulnerabilities
CVE-2025-12695: Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox
- Severity: medium (CVSS 5.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-11-04 · updated 2026-06-17
- Weakness: CWE-653
Description
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.
References
Get alerted when CVE-2025-12695 or the next vulnerability affects your stack