Executive brief
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.
Affected products
- PyPI paddlepaddle
Junglewise Threat Intelligence
CVE-2023-52310: PYSEC-2024-142 - PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on
CVE-2023-52310 · Severity: low · CVSS 3.1 · Published 2024-01-03
Technologies: paddlepaddle (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1755 - PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file
- PYSEC-2026-1756 - PaddlePaddle command injection in paddle.utils.download._wget_download
- PYSEC-2026-1754 - PaddlePaddle command injection vulnerability
- PYSEC-2026-444 - Code Injection in paddlepaddle
- PYSEC-2026-442 - PaddlePaddle Path Traversal vulnerability