Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-42079

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Description

PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

icip-cas PPTAgent

  • < 418491a9a1c02d9d93194b5973bb58df35cf9d00affected

References