Description
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| icip-cas | PPTAgent | < 418491a9a1c02d9d93194b5973bb58df35cf9d00 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pptagent | < 1.1.36 | 1.1.36 | GHSA-89g2-xw5c-v95p |