{"id":"CVE-2024-53526","aliases":["EUVD-2025-0213","GHSA-8h93-28hg-fj84","PYSEC-2026-1268","PYSEC-2026-2428","PYSEC-2026-2429"],"status":"published","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00605,"percentile":0.49391,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-77"],"published":"2025-01-08T00:00:00Z","modified":"2026-07-13T16:43:11Z","fixes":[{"ecosystem":"PyPI","package":"composio-claude","fixed_in":["0.6.9"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"composio-openai","fixed_in":["0.6.9"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"composio-julep","fixed_in":["0.6.9"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"composio-claude","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"composio-openai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"composio-julep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}]},{"source":"osv","ecosystem":"PyPI","package":"composio-claude","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]},{"source":"osv","ecosystem":"PyPI","package":"composio-openai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]},{"source":"osv","ecosystem":"PyPI","package":"composio-julep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]},{"source":"osv","ecosystem":"PyPI","package":"composio-julep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]},{"source":"osv","ecosystem":"PyPI","package":"composio-claude","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]},{"source":"osv","ecosystem":"PyPI","package":"composio-openai","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.5.40"},{"fixed":"0.6.9"}]}],"versions":["0.5.40","0.5.41","0.5.42","0.5.43","0.5.44","0.5.45","0.5.46","0.5.47","0.5.48rc1","0.5.49","0.5.50","0.5.51","0.5.51rc1","0.5.52rc1","0.5.52rc2","0.6.0","0.6.0rc1","0.6.1","0.6.2","0.6.3","0.6.4","0.6.5","0.6.6","0.6.7","0.6.8"]}],"products":[{"vendor":"composio","product":"composio"}],"references":[{"url":"https://github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/openai/composio_openai/toolset.py#L184","tags":["Product","web"]},{"url":"https://github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/claude/composio_claude/toolset.py#L156","tags":["Product","web"]},{"url":"https://github.com/ComposioHQ/composio/blob/11ee7470aa6543097ee30bb036af8e9726dc7a85/python/plugins/julep/composio_julep/toolset.py#L21","tags":["Product","web"]},{"url":"https://github.com/ComposioHQ/composio/issues/1073","tags":["Exploit","Issue Tracking","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53526","tags":["advisory"]},{"url":"https://github.com/ComposioHQ/composio/pull/1107","tags":["web"]},{"url":"https://github.com/ComposioHQ/composio/commit/f496f7fa776335ae7825cad2991c9b38923271fc","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8h93-28hg-fj84","tags":["advisory"]},{"url":"https://github.com/ComposioHQ/composio","tags":["package"]},{"url":"https://pypi.org/project/composio-julep","tags":["package"]},{"url":"https://pypi.org/project/composio-claude","tags":["package"]},{"url":"https://pypi.org/project/composio-openai","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-53526","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2025-01-08T00:00:00Z","modified":"2025-01-31T17:49:10.424Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:34:17.523201Z"}],"euvd":[{"id":"EUVD-2025-0213","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2025-01-08T00:00:00Z","modified":"2025-01-31T17:49:10Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:08.172652Z"}],"ghsa":[{"id":"GHSA-8h93-28hg-fj84","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2025-01-08T21:32:25Z","modified":"2025-01-31T21:07:01Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:38:28.945236Z"}],"nvd":[{"id":"CVE-2024-53526","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2025-01-08T19:15:37.753Z","modified":"2026-06-17T08:08:57.77Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:10:41.838321Z"}],"osv":[{"id":"GHSA-8h93-28hg-fj84","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2025-01-08T21:32:25Z","modified":"2026-07-13T16:43:11.568757035Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"PYSEC-2026-1268","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2026-07-07T14:34:48.553218Z","modified":"2026-07-13T16:43:11.568757035Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"PYSEC-2026-2428","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2026-07-13T14:36:33.146227Z","modified":"2026-07-13T16:43:11.568757035Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"PYSEC-2026-2429","title":"Composio Command Execution vulnerability","description":"composio \u003e=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.","status":"published","published":"2026-07-13T14:36:33.305814Z","modified":"2026-07-13T16:43:11.568757035Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.961245Z"}]}}