CVE-2024-53526 Composio Command Execution vulnerability
Attackers can execute arbitrary commands via the handle_tool_calls function in the composio library, requiring an upgrade to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-53526?
CVE-2024-53526 is a medium-severity command injection vulnerability in n/a, published on 8 Jan 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.
Weakness: CWE-77
Which versions are affected by CVE-2024-53526?
9 open source packages ship an affected version, including composio-claude, composio-julep and composio-openai. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
composio-claude PyPI | From 0.5.40 | 0.6.9 |
composio-claude PyPI | From 0.5.40 | 0.6.9 |
composio-claude PyPI | From 0.5.40 | 0.6.9 |
composio-julep PyPI | From 0.5.40 | 0.6.9 |
composio-julep PyPI | From 0.5.40 | 0.6.9 |
composio-julep PyPI | From 0.5.40 | 0.6.9 |
3 more packages
composio-openai PyPI | From 0.5.40 | 0.6.9 |
composio-openai PyPI | From 0.5.40 | 0.6.9 |
composio-openai PyPI | From 0.5.40 | 0.6.9 |
Products include Composio Composio.
How do I fix CVE-2024-53526?
Upgrade composio-claude to 0.6.9 or later.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2024-53526 being exploited?
There is no known exploitation of CVE-2024-53526 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8h93-28hg-fj84, PYSEC-2026-1268, PYSEC-2026-2428, PYSEC-2026-2429.