CVE-2026-45758

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-45758", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-05-13T06:54:34.222Z", "datePublished": "2026-06-05T19:35:45.801Z", "dateUpdated": "2026-06-08T16:21:05.870Z"}, "containers": {"cna": {"title": "Malicious code in guardrails-ai 0.10.1 (supply chain compromise)", "problemTypes": [{"descriptions": [{"cweId": "CWE-506", "lang": "en", "description": "CWE-506: Embedded Malicious Code", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6"}, {"name": "https://github.com/guardrails-ai/guardrails/issues/1473", "tags": ["x_refsource_MISC"], "url": "https://github.com/guardrails-ai/guardrails/issues/1473"}, {"name": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md", "tags": ["x_refsource_MISC"], "url": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md"}], "affected": [{"vendor": "guardrails-ai", "product": "guardrails", "versions": [{"version": "= 0.10.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-05T19:35:45.801Z"}, "descriptions": [{"lang": "en", "value": "Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. Aany user who installed `guardrails-ai==0.10.1` from PyPI on May 11, 2026 may be affected. Security researchers identified the malicious package within approximately 2 hours of publication, and PyPI quarantined the repository. Based on our telemetry, Guardrails AI maintainers have observed no requests to Guardrails AI infrastructure originating from the malicious 0.10.1 version, and a review of system and access logs has produced no evidence of user data exfiltration through their systems. Users should upgrade to version 0.10.2 or downgrade to version 0.10.0, both of which are unaffected. Those who installed version 0.10.1 should rotate any credentials accessible from their machine (GitHub PATs, cloud provider keys, package registry tokens, API keys) and audit their GitHub account for unauthorized workflows or repositories."}], "source": {"advisory": "GHSA-xmpw-2vmm-p4p6", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-08T16:20:02.293656Z", "id": "CVE-2026-45758", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-08T16:21:05.870Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-45758", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-06-08T16:20:02.293656Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-08T16:21:00.943Z"}}], "cna": {"title": "Malicious code in guardrails-ai 0.10.1 (supply chain compromise)", "source": {"advisory": "GHSA-xmpw-2vmm-p4p6", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "guardrails-ai", "product": "guardrails", "versions": [{"status": "affected", "version": "= 0.10.1"}]}], "references": [{"url": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6", "name": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/guardrails-ai/guardrails/issues/1473", "name": "https://github.com/guardrails-ai/guardrails/issues/1473", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md", "name": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. Aany user who installed `guardrails-ai==0.10.1` from PyPI on May 11, 2026 may be affected. Security researchers identified the malicious package within approximately 2 hours of publication, and PyPI quarantined the repository. Based on our telemetry, Guardrails AI maintainers have observed no requests to Guardrails AI infrastructure originating from the malicious 0.10.1 version, and a review of system and access logs has produced no evidence of user data exfiltration through their systems. Users should upgrade to version 0.10.2 or downgrade to version 0.10.0, both of which are unaffected. Those who installed version 0.10.1 should rotate any credentials accessible from their machine (GitHub PATs, cloud provider keys, package registry tokens, API keys) and audit their GitHub account for unauthorized workflows or repositories."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-506", "description": "CWE-506: Embedded Malicious Code"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-05T19:35:45.801Z"}}}, "cveMetadata": {"cveId": "CVE-2026-45758", "state": "PUBLISHED", "dateUpdated": "2026-06-08T16:21:05.870Z", "dateReserved": "2026-05-13T06:54:34.222Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-05T19:35:45.801Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "guardrails", "vendor": "guardrails-ai", "versions": [{"status": "affected", "version": "= 0.10.1"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:guardrailsai:guardrails_ai:0.10.1:*:*:*:*:python:*:*", "matchCriteriaId": "B8011BB6-C398-4C41-87CA-E62DD63CF980", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of `guardrails-ai` (0.10.1) to PyPI. Aany user who installed `guardrails-ai==0.10.1` from PyPI on May 11, 2026 may be affected. Security researchers identified the malicious package within approximately 2 hours of publication, and PyPI quarantined the repository. Based on our telemetry, Guardrails AI maintainers have observed no requests to Guardrails AI infrastructure originating from the malicious 0.10.1 version, and a review of system and access logs has produced no evidence of user data exfiltration through their systems. Users should upgrade to version 0.10.2 or downgrade to version 0.10.0, both of which are unaffected. Those who installed version 0.10.1 should rotate any credentials accessible from their machine (GitHub PATs, cloud provider keys, package registry tokens, API keys) and audit their GitHub account for unauthorized workflows or repositories."}, {"lang": "es", "value": "Guardrails AI es un framework de Python que ayuda a construir aplicaciones de IA. El 11 de mayo de 2026, aproximadamente a las 6:00 PM hora del Pac\u00edfico, un atacante public\u00f3 una versi\u00f3n maliciosa de 'guardrails-ai' (0.10.1) en PyPI. Cualquier usuario que haya instalado 'guardrails-ai==0.10.1' desde PyPI el 11 de mayo de 2026 podr\u00eda verse afectado. Investigadores de seguridad identificaron el paquete malicioso en aproximadamente 2 horas desde su publicaci\u00f3n, y PyPI puso en cuarentena el repositorio. Seg\u00fan nuestra telemetr\u00eda, los mantenedores de Guardrails AI no han observado solicitudes a la infraestructura de Guardrails AI originadas desde la versi\u00f3n maliciosa 0.10.1, y una revisi\u00f3n de los registros de sistema y acceso no ha producido evidencia de exfiltraci\u00f3n de datos de usuario a trav\u00e9s de sus sistemas. Los usuarios deben actualizar a la versi\u00f3n 0.10.2 o degradar a la versi\u00f3n 0.10.0, ambas no afectadas. Aquellos que instalaron la versi\u00f3n 0.10.1 deben rotar cualquier credencial accesible desde su m\u00e1quina (PATs de GitHub, claves de proveedores de la nube, tokens de registro de paquetes, claves de API) y auditar su cuenta de GitHub en busca de flujos de trabajo o repositorios no autorizados."}], "id": "CVE-2026-45758", "lastModified": "2026-07-23T07:10:00.113", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 6.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45758", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-06-08T16:20:02.293656Z", "version": "2.0.3"}}]}, "published": "2026-06-05T20:17:32.357", "references": [{"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md"}, {"source": "security-advisories@github.com", "tags": ["Issue Tracking"], "url": "https://github.com/guardrails-ai/guardrails/issues/1473"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-506"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.10.1"}}], "enrichment": {"confidence": 98.0, "confidence_source": "matching", "scores": [{"score": 98.0, "source": "matching"}]}, "original": {"product": "guardrails", "source": "cna", "vendor": "guardrails-ai"}, "product": "guardrails", "vendor": "guardrailsai"}], "created": "2026-06-05T21:30:04.840286+00:00", "updated": "2026-06-05T21:45:05.539785+00:00", "vendors": ["guardrailsai", "guardrailsai$PRODUCT$guardrails"]}