← Database

CVE-2024-8953

CRITICAL CVSS: 9.8 Published: 2025-03-20 Modified: 2026-06-17

Description

In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.

Affected Platforms

Composio Composio

Weakness Type

CWE-627, CWE-913

References