CVE-2024-8953 Unsafe eval usage in composiohq/composio
Attackers can execute arbitrary code via the mathematical_calculator endpoint due to unsafe eval usage in the composio library.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-8953?
CVE-2024-8953 is a high-severity code injection vulnerability in composiohq/composio, published on 20 Mar 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.
Which versions are affected by CVE-2024-8953?
3 open source packages ship an affected version, including composio-core. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
composio-core PyPI | All versions | 0.5.43 |
composio-core PyPI | All versions | 0.5.43 |
composio-core PyPI | All versions | 0.5.43 |
Products include Composio Composio.
How do I fix CVE-2024-8953?
Upgrade composio-core to 0.5.43 or later.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2024-8953 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-8953 exists.
Other vulnerabilities in composiohq/composio
Sources
Also known as GHSA-5xg7-5662-8x7j, PYSEC-2026-1264.