CVE-2026-45758

Name of the Vulnerable Software and Affected Versions guardrails-ai version 0.10.1

Description A malicious version of the Python framework was published to PyPI. The package was identified by security researchers and quarantined by PyPI within approximately two hours of publication. Telemetry and log reviews indicated no requests to the software infrastructure originating from the malicious version and no evidence of user data exfiltration through those systems.

Recommendations Upgrade to version 0.10.2 or downgrade to version 0.10.0. Rotate any credentials accessible from the machine where version 0.10.1 was installed, including GitHub PATs, cloud provider keys, package registry tokens, and API keys. Audit GitHub accounts for unauthorized repositories or workflows. Rotate Snowglobe and Guardrails Hub API keys.