DEBIAN-CVE-2026-31236

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2026-31236
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-31236.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-31236
Upstream
  • CVE-2026-31236
Published
2026-05-12T18:16:51Z
Modified
2026-09-15T16:00:06Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec() function without any sanitization, sandboxing, or security restrictions. An attacker can exploit this by crafting a malicious llm command with arbitrary Python code in the --functions argument and using social engineering to trick a victim into running it. This leads to arbitrary code execution on the victim's system, potentially granting the attacker full control.

References

Affected packages

Debian:13 / llm

Package

Name
llm
Purl
pkg:deb/debian/llm?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.14-1
0.16-1
0.17.1-1
0.18-1
0.19-1
0.19.1-1
0.20-1
0.21-1
0.22-1
0.23-1
0.26-1
0.27.1-1
0.28-1
0.28-2
0.29-1
0.30-1
0.31.1-1
0.31.1-2
0.32~rc2-1
0.32-1
0.33-1~exp1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-31236.json"