Code execution in Embedchain

CRÍTICO 9.8CVE-2024-23731 · GHSA-rhhj-5436-95vf · PYSEC-2024-7 · Published 21/01/2024 · updated 17/06/2026

En resumen

CVE-2024-23731 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a embedchain, embedchain (embedchain).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.5% de las vulnerabilidades.
Solución: actualizar a 0.1.57 o posterior.

Package	Affected versions	Patched versions
embedchain PyPI	`< 0.1.57`	`0.1.57`
embedchain embedchain	`< 0.1.57`	`0.1.57`

The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.

NVD description

The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.