Paddlex
Monthly
Code injection in PaddlePaddle PaddleX through version 3.7.2 allows an attacker to execute arbitrary Python code by supplying a crafted 'scale' value that the text-detection preprocessing component passes to a bare eval() call. The flaw is not reachable in a default deployment: it requires the victim to load an attacker-controlled PaddleX text-detection model or pipeline configuration, which is why the assessed vector carries User Interaction (UI:P) and a local attack vector despite high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and the upstream fix (PR #5212) is still awaiting acceptance, so no released patched version is independently confirmed.
Code injection in PaddlePaddle PaddleX through version 3.7.2 allows an attacker to execute arbitrary Python code by supplying a crafted 'scale' value that the text-detection preprocessing component passes to a bare eval() call. The flaw is not reachable in a default deployment: it requires the victim to load an attacker-controlled PaddleX text-detection model or pipeline configuration, which is why the assessed vector carries User Interaction (UI:P) and a local attack vector despite high confidentiality, integrity, and availability impact. No public exploit code has been identified at time of analysis, and the upstream fix (PR #5212) is still awaiting acceptance, so no released patched version is independently confirmed.