CVE-2024-45858

Name of the Vulnerable Software and Affected Versions Guardrails AI Guardrails framework versions 0.2.9 through 0.5.10

Description An arbitrary code execution issue exists due to the way the Guardrails AI Guardrails framework validates XML files. If a maliciously crafted XML file containing Python code is loaded, the code will be executed on the user's machine because it is passed to an eval function.

Recommendations For Guardrails AI Guardrails framework versions 0.2.9 through 0.5.10, consider disabling the XML validation feature until a patch is available to prevent potential code execution. Restrict access to loading XML files from untrusted sources to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.