CVE-2025-12695

Description

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the PythonInterpreter class.

Risk Information

Base Score

5.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.009

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2025-12695 are affected in Python-dspy 3.0.3	Windows
Vulnerabilities CVE-2025-12695 are affected in Python-dspy for linux 3.0.3	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234