-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from using Jinja2's default Environment instead of SandboxedEnvironment across multiple components. The commit diffs show replacement of Template/NativeEnvironment with SandboxedEnvironment in all affected files. Release notes explicitly list PromptBuilder, ChatPromptBuilder, OutputAdapter, ConditionalRouter and PipelineTemplate as impacted. Each vulnerable function handled user-controllable templates without proper sandboxing, enabling arbitrary code execution through template injection.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| haystack-ai | pip | < 2.3.1 | 2.3.1 |