Vulnerability · Published May 4, 2026 · Assigned by GitHub_M
CVE-2026-42079PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
High 8.6
In plain English
A high-severity security flaw in PPTAgent from icip-cas. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)8.6High
Exploit odds (30 days)0.1%top 96.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | pptagent | 1.1.36 | GHSA-89g2-xw5c-v95p |
| PyPI | pptagent | 1.1.36 | PYSEC-2026-2892 |
Affected products (as reported)
Weakness: CWE-95 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H