CVE-2026-42079 - Vulnerability Analysis
HighCVSS: 8.6Last Updated: May 4, 2026
PPTAgent - Remote Code Execution
Published: May 4, 2026Updated: May 4, 2026
Overview
PPTAgent contains a remote code execution caused by Python eval() of LLM-generated code with builtins in scope, letting attackers execute arbitrary code remotely, exploit requires crafted input triggering eval.
Severity & Score
Severity: High
CVSS Score: 8.6
Impact
Attackers can execute arbitrary code remotely, potentially leading to full system compromise.
Mitigation
Update to the version including commit 418491a or latest available version.
References
Related Resources
Details
- CVE ID
- CVE-2026-42079
- Severity
- High
- CVSS Score
- 8.6
- Type
- command_injection
- Status
- new
CWE
- CWE-95
CVSS Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H