Medium severity · published Mar 25, 2025
CVE-2025-2733
mannaandpoem OpenManus Prompt python_execute.py os command injection
6.3
CVSS
1.5%
EPSS
No
On KEV
Description
A vulnerability classified as critical has been found in mannaandpoem OpenManus up to 2025.3.13. This affects an unknown part of the file app/tool/python_execute.py of the component Prompt Handler. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
OpenManus · mannaandpoem
2025.3.0; 2025.3.1; 2025.3.2; 2025.3.3; 2025.3.4; 2025.3.5; +8 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2733
magnificent-dill-351.notion.site
https://magnificent-dill-351.notion.site/Command-Execution-in-Openmanus-2025-3-13-1b6c693918ed80b2826ef6bb385693fa
vuldb.com
https://vuldb.com/?ctiid.300753
vuldb.com
https://vuldb.com/?id.300753
vuldb.com
https://vuldb.com/?submit.520426
More from OpenManus
5.5
CVE-2025-2954
mannaandpoem OpenManus File file_saver.py execute access control