Composio

9 CVEs across 1 Composio products. Browse Composio vulnerabilities, severities, and proof-of-concept exploits.

Composio products with known CVEs

ProductCVEs
Composio9
Composio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-56427High7.52025-12-04Directory Traversal vulnerability in ComposioHQ v.0.7.20 allows a remote attacker to obtain sensitive information via the _download_file_or_dir function.
CVE-2024-8958Critical9.82025-03-20In composiohq/composio version 0.4.3, there is an unrestricted file write and read vulnerability in the filetools actions. Due to improper validation of file p…
CVE-2024-8955High7.52025-03-20A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of…
CVE-2024-8954Critical9.82025-03-20In composiohq/composio version 0.5.10, the API does not validate the `x-api-key` header's value during the authentication step. This vulnerability allows an at…
CVE-2024-8953Critical9.82025-03-20In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to…
CVE-2024-8952High7.52025-03-20A Server-Side Request Forgery (SSRF) vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOL_SCRAPE_WEBSIT…
CVE-2024-53526Medium6.42025-01-08composio >=0.5.40 is vulnerable to Command Execution in composio_openai, composio_claude, and composio_julep via the handle_tool_calls function.
CVE-2024-8865Low3.52024-09-15A vulnerability was found in composiohq composio up to 0.5.8 and classified as problematic. Affected by this issue is the function path of the file composio\se…
CVE-2024-8864Medium5.52024-09-15A vulnerability has been found in composiohq composio up to 0.5.6 and classified as critical. Affected by this vulnerability is the function Calculator of the…