CVE-2026-45758 Details

A supply chain vulnerability has been identified in the Guardrails AI Python framework, specifically in version 0.10.1, which was maliciously published to PyPI on May 11, 2026. This compromised version contains code that, upon import, downloads and executes a remote payload on Linux systems. The malicious package was available for approximately two hours before being quarantined by PyPI. Users who installed this version may have compromised their local environment, although no evidence of user data exfiltration through Guardrails AI's systems has been found. The vulnerability stems from an employee's GitHub Personal Access Token being compromised, which allowed an attacker to publish the malicious package using secrets extracted from GitHub Actions.

Users should uninstall the malicious version 0.10.1 and upgrade to version 0.10.2 or downgrade to version 0.10.0, both of which are unaffected. Those who installed version 0.10.1 should rotate any credentials accessible from their machine, such as GitHub Personal Access Tokens, cloud provider keys, package registry tokens, and API keys. Additionally, audit GitHub accounts for unauthorized workflows or repositories.