guardrails vulnerabilities

2 known vulnerabilities in guardrails from Guardrails AI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  guardrails: Embedded Malicious Code

  CVE-2026-45758Jun 5, 2026Guardrails AI

  Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. Aany user who installed `guardrails-ai==0.10.1` from PyPI on

• 7.8 High severity

  guardrails: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2024-45858Sep 18, 2024Guardrails AI

  An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be