CVE-2026-54769

Affected versions of the Langroid package are vulnerable to Remote Code Execution due to incomplete `eval()` mitigation in the `TableChatAgent` and `VectorStore` modules. The `TableChatAgent.pandas_eval()` and `VectorStore` methods attempt to sandbox execution by setting `locals` to an empty dictionary `{}` but fail to scrub `__builtins__` from the `globals` dictionary, allowing access to dangerous functions like `__import__('os').system()`. An attacker can exploit this by crafting a prompt that causes the language model to execute arbitrary system commands, leading to unauthenticated Remote Code Execution on the host system.