Vulnerability · Published Mar 10, 2025 · Assigned by CERT-PL

CVE-2025-1497Remote Code Execution in PlotAI

Critical 9.3

In plain English

A critical-severity code injection in PlotAI from MLJAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)9.3Critical

Exploit odds (30 days)1.0%top 35.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting the risk. The vendor does not plan to release a patch to fix this vulnerability.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	plotai	0.0.7	GHSA-2hmp-5wqg-f24h
PyPI	plotai	0.0.7	PYSEC-2025-22

Affected products (as reported)

Vendor	Product	Versions
MLJAR	PlotAI	0 – through 0.0.6

Weakness: CWE-94 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://cert.pl/posts/2025/03/CVE-2025-1497 third-party-advisory
https://cert.pl/en/posts/2025/03/CVE-2025-1497 third-party-advisory
https://github.com/mljar/plotai product
https://github.com/mljar/plotai/commit/bdcfb13484f0b85703a4c1ddfd71cb21840e7fde patch