CVE-2025-5151
defog-ai introspect analysis_tools.py execute_analysis_code_safely code injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function execute_analysis_code_safely of the file introspect/backend/tools/analysis_tools.py. The manipulation of the argument code leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is named 502. It is recommended to apply a patch to fix this issue. The code maintainer explains, that "[they] have added some workarounds to address this in #502, but will not be implementing a full fix. This is because this repo is meant to be run in a docker environment, which will significantly mitigate potential security risks. Having said that, we have added a SECURITY section in our README to make this clearer to users."
Es wurde eine Schwachstelle in defog-ai introspect bis 0.1.4 entdeckt. Sie wurde als kritisch eingestuft. Betroffen hiervon ist die Funktion execute_analysis_code_safely der Datei introspect/backend/tools/analysis_tools.py. Mittels Manipulieren des Arguments code mit unbekannten Daten kann eine code injection-Schwachstelle ausgenutzt werden. Der Angriff muss lokal erfolgen. Der Exploit steht zur öffentlichen Verfügung. Der Patch wird als 502 bezeichnet. Als bestmögliche Massnahme wird Patching empfohlen.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2025-05-24 CVE Reserved
- 2025-05-25 CVE Published
- 2025-05-28 CVE Updated
- 2025-05-28 First Exploit
- 2025-05-31 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| https://github.com/defog-ai/introspect/issues/495 | Issue Tracking | |
| https://github.com/defog-ai/introspect/issues/495#issuecomment-2894640278 | Issue Tracking | |
| https://vuldb.com/?id.310239 | Technical Description | |
| https://vuldb.com/?submit.574809 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/defog-ai/introspect/issues/495#issue-3036141048 | 2025-05-28 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/defog-ai/introspect/pull/502 | 2025-05-25 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Defog-ai Search vendor "Defog-ai" | Introspect Search vendor "Defog-ai" for product "Introspect" | 0.1.0 Search vendor "Defog-ai" for product "Introspect" and version "0.1.0" | en |
Affected
| ||||||
| Defog-ai Search vendor "Defog-ai" | Introspect Search vendor "Defog-ai" for product "Introspect" | 0.1.1 Search vendor "Defog-ai" for product "Introspect" and version "0.1.1" | en |
Affected
| ||||||
| Defog-ai Search vendor "Defog-ai" | Introspect Search vendor "Defog-ai" for product "Introspect" | 0.1.2 Search vendor "Defog-ai" for product "Introspect" and version "0.1.2" | en |
Affected
| ||||||
| Defog-ai Search vendor "Defog-ai" | Introspect Search vendor "Defog-ai" for product "Introspect" | 0.1.3 Search vendor "Defog-ai" for product "Introspect" and version "0.1.3" | en |
Affected
| ||||||
| Defog-ai Search vendor "Defog-ai" | Introspect Search vendor "Defog-ai" for product "Introspect" | 0.1.4 Search vendor "Defog-ai" for product "Introspect" and version "0.1.4" | en |
Affected
| ||||||