Guardrails AI Code Injection Vulnerability Allowing Remote Code Execution

A code injection vulnerability has been identified in Guardrails AI versions through 0.6.7, specifically within the Hub package installation process. This vulnerability allows for remote code execution by injecting arbitrary code into the post_install script of validator packages. The issue arises because the script path is generated from untrusted manifest data and executed without adequate validation or sanitization. As a result, an attacker who can publish malicious packages to the Hub can execute harmful code on any system where the package is installed.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.