Python Command Injection in imartinez/privategpt

A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/components/llm/custom/sagemaker.py` of the imartinez/privategpt application, versions up to and including 0.3.0. The vulnerability arises due to the use of the `eval()` function to parse a string received from a remote AWS SageMaker LLM endpoint into a dictionary. This method of parsing is unsafe as it can execute arbitrary Python code contained within the response. An attacker can exploit this vulnerability by manipulating the response from the AWS SageMaker LLM endpoint to include malicious Python code, leading to potential execution of arbitrary commands on the system hosting the application. The issue is fixed in version 0.6.0.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

PrivateGPT 操作系统命令注入漏洞

PrivateGPT是Zylon开源的一个 AI 项目。 PrivateGPT 0.3.0及之前版本存在操作系统命令注入漏洞，该漏洞源于存在Python命令注入漏洞，攻击者可以在托管应用程序的系统上执行任意命令。

N/A

N/A