p PatchFirst

CVE-2026-31236

CVE-2026-31236

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec() function without any sanitization, sandboxing, or security restrictions. An attacker can exploit this by crafting a malicious llm command with arbitrary Python code in the --functions argument and using social engineering to trick a victim into running it. This leads to arbitrary code execution on the victim's system, potentially granting the attacker full control.

CVSS 9.8 · Critical · EPSS 0.3%

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • llm Debian:13

    Versions
    • 0.14-1
    • 0.16-1
    • 0.17.1-1
    • 0.18-1
    • 0.19-1
    • 0.19.1-1
    • 0.20-1
    • 0.21-1
    • 0.22-1
    • 0.23-1
    • 0.26-1
    • 0.27.1-1
    • 0.28-1
    • 0.28-2
    • 0.29-1
    • 0.30-1
    • 0.31.1-1
    • 0.31.1-2
    • 0.32-1
    • 0.32~rc2-1
    • 0.33-1~exp1
    • 0.36-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • llm Debian:14

    Versions
    • 0.14-1
    • 0.16-1
    • 0.17.1-1
    • 0.18-1
    • 0.19-1
    • 0.19.1-1
    • 0.20-1
    • 0.21-1
    • 0.22-1
    • 0.23-1
    • 0.26-1
    • 0.27.1-1
    • 0.28-1
    • 0.28-2
    • 0.29-1
    • 0.30-1
    • 0.31.1-1
    • 0.31.1-2
    • 0.32-1
    • 0.32~rc2-1
    • 0.33-1~exp1
    • 0.36-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • llm PyPI

    Versions
    • 0.1
    • 0.10
    • 0.10a0
    • 0.10a1
    • 0.11
    • 0.11.1
    • 0.11.2
    • 0.12
    • 0.13
    • 0.13.1
    • 0.14
    • 0.15
    • 0.16
    • 0.17
    • 0.17.1
    • 0.17a0
    • 0.18
    • 0.18a0
    • 0.18a1
    • 0.19
    • 0.19.1
    • 0.19a0
    • 0.19a1
    • 0.19a2
    • 0.2
    • 0.20
    • 0.21
    • 0.22
    • 0.23
    • 0.23a0
    • 0.24
    • 0.24.1
    • 0.24.2
    • 0.24a0
    • 0.24a1
    • 0.25
    • 0.25a0
    • 0.26
    • 0.26a0
    • 0.26a1
    • 0.27
    • 0.27.1
    • 0.3
    • 0.4
    • 0.4.1
    • 0.5
    • 0.6
    • 0.6.1
    • 0.7
    • 0.7.1
    • 0.8
    • 0.8.1
    • 0.9
    • 0.9a0
    • 0.9a1
    Affected ranges
    • ECOSYSTEM: ≤ 0.27.1

    No fix published

  • llm Ubuntu:25.10

    Versions
    • 0.23-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • llm Ubuntu:26.04:LTS

    Versions
    • 0.23-1
    • 0.27.1-1
    • 0.28-1
    • 0.28-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →