CVE-2025-4767 | defog-ai introspect up to 0.1.4 Test Endpoint integration_routes.py test_custom_tool input_model code injection (Issue 496)

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function test_custom_tool of the file introspect/backend/integration_routes.py of the component Test Endpoint. The manipulation of the argument input_model leads to code injection.

This vulnerability is handled as CVE-2025-4767. Attacking locally is a requirement. Furthermore, there is an exploit available.