# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first

- [FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia](https://agentprime.io/advisories/CVE-2026-116786.md)
  `CVE-2026-116786` · CVE record: signalwire freeswitch · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Command injection, Code injection
- [SuiteCRM: Admin OS RCE via Dropdown Editor PHP Injection](https://agentprime.io/advisories/CVE-2026-100358.md)
  `CVE-2026-100358` · CVE record: SuiteCRM SuiteCRM · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/\<ID>](https://agentprime.io/advisories/CVE-2026-123198.md)
  `CVE-2026-123198` · CVE record: LMFDB LMFDB · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE](https://agentprime.io/advisories/GHSA-64vx-6h2c-rjh7.md)
  `GHSA-64vx-6h2c-rjh7`, `CVE-2026-61536` · PyPI `banks`: affected `<2.4.3`, fixed in `2.4.3` · CVSS 7.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings Files](https://agentprime.io/advisories/CVE-2026-120859.md)
  `CVE-2026-120859` · CVE record: PyMoDAQ PyMoDAQ and 3 more · CVSS 8.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection, Insecure deserialization
- [h5io before 0.2.6 Arbitrary Code Execution via read_hdf5](https://agentprime.io/advisories/CVE-2026-120499.md)
  `CVE-2026-120499` · CVE record: h5io h5io · CVSS 8.5 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection, Insecure deserialization
- [OpenHuman: Yuanbao non-web channel can bypass human approval to execute \`node_exec\`](https://agentprime.io/advisories/CVE-2026-54141.md)
  `CVE-2026-54141` · CVE record: tinyhumansai openhuman · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection, Broken access control
- [Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading](https://agentprime.io/advisories/CVE-2026-68524.md)
  `CVE-2026-68524` · CVE record: Apache Software Foundation Apache OFBiz · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: Content renderer runs a service name stored on the row](https://agentprime.io/advisories/CVE-2026-82894.md)
  `CVE-2026-82894` · CVE record: Apache Software Foundation Apache OFBiz · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: renderLink compiles link parameters as FreeMarker source](https://agentprime.io/advisories/CVE-2026-82910.md)
  `CVE-2026-82910` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: Unsandboxed Groovy compiled from a service parameter](https://agentprime.io/advisories/CVE-2026-82912.md)
  `CVE-2026-82912` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: Widget use-when Expression Injection Bypasses Groovy Sandbox for authenticated RCE](https://agentprime.io/advisories/CVE-2026-82960.md)
  `CVE-2026-82960` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 8.8 High · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: Unauthenticated RCE via login-page widget injection](https://agentprime.io/advisories/CVE-2026-83542.md)
  `CVE-2026-83542` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [Apache OFBiz: Authenticated Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-85627.md)
  `CVE-2026-85627` · CVE record: Apache Software Foundation Apache OFBiz · No CVSS score · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control, Code injection
- [eosphoros-ai DB-GPT Jinja2 Template \_\_init\_\_.py FileBasedSkill.get_prompt special elements in template engine](https://agentprime.io/advisories/CVE-2026-123020.md)
  `CVE-2026-123020` · CVE record: eosphoros-ai DB-GPT · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection, CWE-791
- [Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing](https://agentprime.io/advisories/CVE-2026-73098.md)
  `CVE-2026-73098` · CVE record: Apache Software Foundation Apache Juneau · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Nov 2026 · Tags: Code injection
- [eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection](https://agentprime.io/advisories/CVE-2026-123018.md)
  `CVE-2026-123018` · CVE record: eosphoros-ai DB-GPT · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Other injection, Code injection
- [SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting](https://agentprime.io/advisories/CVE-2026-122190.md)
  `CVE-2026-122190` · CVE record: SourceCodester Online Food Ordering System · CVSS 4.8 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [NPC-Worldwide npcpy sft.py load_sft_model code injection](https://agentprime.io/advisories/CVE-2026-122014.md)
  `CVE-2026-122014` · CVE record: NPC-Worldwide npcpy · CVSS 5.3 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Other injection, Code injection
- [EmpireSoft EmpireCMS index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-121929.md)
  `CVE-2026-121929` · CVE record: EmpireSoft EmpireCMS · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [InfiniFlow RAGFlow Images API file_utils.py cross site scripting](https://agentprime.io/advisories/CVE-2026-121928.md)
  `CVE-2026-121928` · CVE record: InfiniFlow RAGFlow · CVSS 5.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [DataGerry < 3.3.0 SSTI via DocAPI Template Rendering](https://agentprime.io/advisories/CVE-2026-57853.md)
  `CVE-2026-57853` · CVE record: DataGerry DataGerry · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Code execution through double evaluation in address replacement rules](https://agentprime.io/advisories/CVE-2026-114424.md)
  `CVE-2026-114424` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Code injection
- [Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-92196.md)
  `CVE-2026-92196` · CVE record: Quest Foglight for Databases · CVSS 7.2 High · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection
- [Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters](https://agentprime.io/advisories/CVE-2026-119084.md)
  `CVE-2026-119084` · CVE record: AWS amazon-redshift-jdbc-driver · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection
- [Report Deserialization Code Execution](https://agentprime.io/advisories/CVE-2026-115731.md)
  `CVE-2026-115731` · CVE record: Perforce Puppet Enterprise · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, Insecure deserialization
- [Stanza: RCE via pickle deserialization in the lemmatizer](https://agentprime.io/advisories/GHSA-gh9r-c94j-cmp5.md)
  `GHSA-gh9r-c94j-cmp5`, `CVE-2026-115878` · PyPI `stanza`: affected `>=1.14.0, <1.15.0`, fixed in `1.15.0` · CVSS 7.8 High · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, Insecure deserialization
- [fastapi-code-generator: Import-time RCE via route path -> unescaped @app.get('...') decorator](https://agentprime.io/advisories/CVE-2026-63471.md)
  `CVE-2026-63471` · CVE record: koxudaxi fastapi-code-generator · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, CWE-116
- [fastapi-code-generator: Import-time RCE via response status-code key -> unescaped @app.get(..., responses={...}) dict](https://agentprime.io/advisories/CVE-2026-63469.md)
  `CVE-2026-63469` · CVE record: koxudaxi fastapi-code-generator · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, CWE-116
- [fastapi-code-generator: Call-time RCE via operation summary -> unescaped route-handler docstring](https://agentprime.io/advisories/CVE-2026-63470.md)
  `CVE-2026-63470` · CVE record: koxudaxi fastapi-code-generator · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, CWE-116
- [Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered \`.constructor\` member access](https://agentprime.io/advisories/GHSA-33r5-xmm8-v6x5.md)
  `GHSA-33r5-xmm8-v6x5`, `CVE-2026-44267` · npm `@enspirit/elo`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-693
- [Elo Ruby backend has Remote Code Execution via unescaped \`#{...}\` interpolation in emitted string literals and subtype-constraint labels](https://agentprime.io/advisories/GHSA-7w38-ggh5-v542.md)
  `GHSA-7w38-ggh5-v542`, `CVE-2026-44266` · npm `@enspirit/elo`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection, CWE-116
- [Elo backends have code injection via unvalidated emission of programmatic AST fields](https://agentprime.io/advisories/GHSA-x9rp-7wh3-2rj5.md)
  `GHSA-x9rp-7wh3-2rj5`, `CVE-2026-44265` · npm `@enspirit/elo`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 7.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: SQL injection, Code injection, CWE-20, CWE-749
- [Ziroom ZHOME A0101 Lua zrUsb.lua loadstring code injection](https://agentprime.io/advisories/CVE-2026-121260.md)
  `CVE-2026-121260` · CVE record: Ziroom ZHOME A0101 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Nov 2026 · Tags: Other injection, Code injection
- [AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone](https://agentprime.io/advisories/CVE-2026-121428.md)
  `CVE-2026-121428` · CVE record: AzuraCast AzuraCast · CVSS 8.7 High · Not analysed yet · Published 3 Nov 2026 · Tags: Code injection
- [Welcart e-Commerce Plugin paymentESCOTT.main.class.php error_page_message cross site scripting](https://agentprime.io/advisories/CVE-2026-120597.md)
  `CVE-2026-120597` · CVE record: Welcart e-Commerce Plugin · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [s2Member <= 260927 - Unauthenticated Remote Code Execution via 'item_name' IPN Parameter](https://agentprime.io/advisories/CVE-2026-86596.md)
  `CVE-2026-86596` · CVE record: clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Code injection
- [Template injection in the publishing component of awslabs Virtual Engineering Workbench](https://agentprime.io/advisories/CVE-2026-119085.md)
  `CVE-2026-119085` · CVE record: AWS virtual-engineering-workbench · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Nov 2026 · Tags: Code injection
- [Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1](https://agentprime.io/advisories/CVE-2026-102802.md)
  `CVE-2026-102802` · CVE record: regularlabs.com Sourcerer Free extension for Joomla and 2 more · CVSS 8.9 High · Not analysed yet · Published 2 Nov 2026 · Tags: Code injection
- [Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5](https://agentprime.io/advisories/CVE-2026-105600.md)
  `CVE-2026-105600` · CVE record: php-web-design.com StageIt extension for Joomla · CVSS 8.6 High · Not analysed yet · Published 2 Nov 2026 · Tags: Code injection
- [dayrui XunRuiCMS Mobile Site Directory index.php str_replace code injection](https://agentprime.io/advisories/CVE-2026-120349.md)
  `CVE-2026-120349` · CVE record: dayrui XunRuiCMS · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Other injection, Code injection
- [dayrui XunRuiCMS Email Template Rendering Notice.php \_get_tpl_content code injection](https://agentprime.io/advisories/CVE-2026-120348.md)
  `CVE-2026-120348` · CVE record: dayrui XunRuiCMS · CVSS 6.9 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Other injection, Code injection
- [mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting](https://agentprime.io/advisories/CVE-2026-120343.md)
  `CVE-2026-120343` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scripting](https://agentprime.io/advisories/CVE-2026-120339.md)
  `CVE-2026-120339` · CVE record: mathurvishal CloudClassroom-PHP-Project · CVSS 5.3 Medium · Not analysed yet · Published 2 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [beecue FastBee Groovy Script Executor script code injection](https://agentprime.io/advisories/CVE-2026-120274.md)
  `CVE-2026-120274` · CVE record: beecue FastBee · CVSS 5.1 Medium · Not analysed yet · Published 1 Nov 2026 · Tags: Other injection, Code injection
- [Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl.cgi cross site scripting](https://agentprime.io/advisories/CVE-2026-120242.md)
  `CVE-2026-120242` · CVE record: Ruijie RG-ES205GC and 4 more · CVSS 4.8 Medium · Not analysed yet · Published 1 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Prefab UI Pyodide sandbox escape to host RCE](https://agentprime.io/advisories/CVE-2026-120338.md)
  `CVE-2026-120338` · CVE record: PrefectHQ prefab-ui · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Nov 2026 · Tags: Code injection, Privilege escalation, CWE-693
- [Typemill SvgSanitizer.php saveImage cross site scripting](https://agentprime.io/advisories/CVE-2026-120218.md)
  `CVE-2026-120218` · CVE record: Typemill · CVSS 5.1 Medium · Not analysed yet · Published 1 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [PostyBirb Plus Submission Description Editor DescriptionInput.tsx cross site scripting](https://agentprime.io/advisories/CVE-2026-120190.md)
  `CVE-2026-120190` · CVE record: PostyBirb Plus · CVSS 5.1 Medium · Not analysed yet · Published 1 Nov 2026 · Tags: Cross-site scripting (XSS), Code injection
- [ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates](https://agentprime.io/advisories/CVE-2026-120203.md)
  `CVE-2026-120203` · CVE record: ShowDoc ShowDoc · CVSS 8.7 High · Not analysed yet · Published 31 Oct 2026 · Tags: Code injection
- [Konflux-ci: remote code execution via eval() in manifest scripts](https://agentprime.io/advisories/CVE-2026-116964.md)
  `CVE-2026-116964` · CVE record · CVSS 8.4 High · Not analysed yet · Published 31 Oct 2026 · Tags: Code injection
- [Konflux-ci: jq filter injection in github workflow issue management](https://agentprime.io/advisories/CVE-2026-116086.md)
  `CVE-2026-116086` · CVE record · CVSS 8.8 High · Not analysed yet · Published 31 Oct 2026 · Tags: Code injection
- [Ninja Forms <= 3.15.5 - Unauthenticated Arbitrary Shortcode Execution via 'formData' Field Value via Success Message Merge Tag](https://agentprime.io/advisories/CVE-2026-100155.md)
  `CVE-2026-100155` · CVE record: kstover Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder · CVSS 6.5 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Code injection
- [Ninja Forms <= 3.15.5 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via '{wp:user_display_name}' Merge Tag via display_name](https://agentprime.io/advisories/CVE-2026-101326.md)
  `CVE-2026-101326` · CVE record: kstover Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder · CVSS 5.4 Medium · Not analysed yet · Published 31 Oct 2026 · Tags: Code injection
- [TAKO AI Agent for Okta: Authenticated Python execution through validator bypass](https://agentprime.io/advisories/CVE-2026-63378.md)
  `CVE-2026-63378` · CVE record: fctr-id okta-ai-agent · CVSS 8.8 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection
- [Refitter: C# source injection through OpenAPI header parameter names](https://agentprime.io/advisories/CVE-2026-63346.md)
  `CVE-2026-63346` · CVE record: christianhelle refitter · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection, CWE-116
- [Refitter: C# source injection through OpenAPI content-type map keys](https://agentprime.io/advisories/CVE-2026-63344.md)
  `CVE-2026-63344` · CVE record: christianhelle refitter · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection, CWE-116
- [Refitter: C# source injection through OpenAPI path keys](https://agentprime.io/advisories/CVE-2026-63345.md)
  `CVE-2026-63345` · CVE record: christianhelle refitter · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection, CWE-1116
- [ThingLinks vulnerable to authenticated remote code execution via Groovy script registration in ThingLinks](https://agentprime.io/advisories/CVE-2026-62853.md)
  `CVE-2026-62853` · CVE record: mqttsnet thinglinks · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Command injection, Code injection
- [OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy](https://agentprime.io/advisories/CVE-2026-62284.md)
  `CVE-2026-62284` · CVE record: osac-project osac-operator · CVSS 8.6 High · Not analysed yet · Published 30 Oct 2026 · Tags: Code injection, Server-side request forgery (SSRF)

Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTEwLTMwVDE5OjIzOjM5LjI1NzAwMFoiLCJDVkUtMjAyNi02MjI4NCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/>. Everything for agents: <https://agentprime.io/llms.txt>.