Unrated

DEBIAN-CVE-2026-31236

Type: advisorySource: OSV1 source record

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec() function without any sanitization, sandboxing, or security restrictions. An attacker can exploit this by crafting a malicious llm command with arbitrary Python code in the --functions argument and using social engineering to trick a victim into running it. This leads to arbitrary code execution on the victim's system, potentially granting the attacker full control.

Announced 12 May 2026Source revision 1

Original source ↗

DEBIAN-CVE-2026-31236

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:DEBIAN-CVE-2026-31236

llm

Source reference: /affected/0/package/name

Affected versions: 0.14-1
Source reference: /affected/0/versions
0.16-1
Source reference: /affected/0/versions
0.17.1-1
Source reference: /affected/0/versions
0.18-1
Source reference: /affected/0/versions
0.19-1
Source reference: /affected/0/versions
0.19.1-1
Source reference: /affected/0/versions
0.20-1
Source reference: /affected/0/versions
0.21-1
Source reference: /affected/0/versions
0.22-1
Source reference: /affected/0/versions
0.23-1
Source reference: /affected/0/versions
0.26-1
Source reference: /affected/0/versions
0.27.1-1
Source reference: /affected/0/versions
0.28-1
Source reference: /affected/0/versions
0.28-2
Source reference: /affected/0/versions
0.29-1
Source reference: /affected/0/versions
0.30-1
Source reference: /affected/0/versions
0.31.1-1
Source reference: /affected/0/versions
0.31.1-2
Source reference: /affected/0/versions
0.32-1
Source reference: /affected/0/versions
0.32~rc2-1
Source reference: /affected/0/versions
0.33-1~exp1
Source reference: /affected/0/versions
0.36-1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

llm

Source reference: /affected/1/package/name

Affected versions: 0.14-1
Source reference: /affected/1/versions
0.16-1
Source reference: /affected/1/versions
0.17.1-1
Source reference: /affected/1/versions
0.18-1
Source reference: /affected/1/versions
0.19-1
Source reference: /affected/1/versions
0.19.1-1
Source reference: /affected/1/versions
0.20-1
Source reference: /affected/1/versions
0.21-1
Source reference: /affected/1/versions
0.22-1
Source reference: /affected/1/versions
0.23-1
Source reference: /affected/1/versions
0.26-1
Source reference: /affected/1/versions
0.27.1-1
Source reference: /affected/1/versions
0.28-1
Source reference: /affected/1/versions
0.28-2
Source reference: /affected/1/versions
0.29-1
Source reference: /affected/1/versions
0.30-1
Source reference: /affected/1/versions
0.31.1-1
Source reference: /affected/1/versions
0.31.1-2
Source reference: /affected/1/versions
0.32-1
Source reference: /affected/1/versions
0.32~rc2-1
Source reference: /affected/1/versions
0.33-1~exp1
Source reference: /affected/1/versions
0.36-1
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "llm",
      "purl": "pkg:deb/debian/llm?arch=source&distro=trixie",
      "ecosystem": "Debian:13"
    },
    "versions": [
      "0.14-1",
      "0.16-1",
      "0.17.1-1",
      "0.18-1",
      "0.19-1",
      "0.19.1-1",
      "0.20-1",
      "0.21-1",
      "0.22-1",
      "0.23-1",
      "0.26-1",
      "0.27.1-1",
      "0.28-1",
      "0.28-2",
      "0.29-1",
      "0.30-1",
      "0.31.1-1",
      "0.31.1-2",
      "0.32-1",
      "0.32~rc2-1",
      "0.33-1~exp1",
      "0.36-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-31236.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "llm",
      "purl": "pkg:deb/debian/llm?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "0.14-1",
      "0.16-1",
      "0.17.1-1",
      "0.18-1",
      "0.19-1",
      "0.19.1-1",
      "0.20-1",
      "0.21-1",
      "0.22-1",
      "0.23-1",
      "0.26-1",
      "0.27.1-1",
      "0.28-1",
      "0.28-2",
      "0.29-1",
      "0.30-1",
      "0.31.1-1",
      "0.31.1-2",
      "0.32-1",
      "0.32~rc2-1",
      "0.33-1~exp1",
      "0.36-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-31236.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #58684 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 18:15:46 GMT
Publisher date: Tue, 12 May 2026 18:16:51 GMT

Read the original announcement