# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Duplicate Advisory: Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write](https://agentprime.io/advisories/GHSA-fwwx-3362-3947.md)
  `GHSA-fwwx-3362-3947` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 18 Aug 2026 · Tags: Code injection
- [grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint](https://agentprime.io/advisories/CVE-2026-75829.md)
  `CVE-2026-75829` · CVE record: getgrav grav · CVSS 8.6 High · Not analysed yet · Published 18 Aug 2026 · Tags: Code injection
- [SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting](https://agentprime.io/advisories/CVE-2026-75078.md)
  `CVE-2026-75078` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting](https://agentprime.io/advisories/CVE-2026-75077.md)
  `CVE-2026-75077` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment](https://agentprime.io/advisories/CVE-2026-44845.md)
  `CVE-2026-44845` · CVE record: jumpserver jumpserver · CVSS 6.7 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench](https://agentprime.io/advisories/CVE-2026-34398.md)
  `CVE-2026-34398` · CVE record: FreeCAD FreeCAD · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page](https://agentprime.io/advisories/CVE-2026-34399.md)
  `CVE-2026-34399` · CVE record: FreeCAD FreeCAD · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore](https://agentprime.io/advisories/CVE-2026-34789.md)
  `CVE-2026-34789` · CVE record: FreeCAD FreeCAD · CVSS 7.0 High · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [ERPNext: Server-Side Template Injection leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-65974.md)
  `CVE-2026-65974` · CVE record: frappe erpnext · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [Improper Control of Generation of Code ('Code Injection') in GitLab](https://agentprime.io/advisories/CVE-2026-19478.md)
  `CVE-2026-19478` · CVE record: GitLab GitLab · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes](https://agentprime.io/advisories/GHSA-3496-9g83-7v6x.md)
  `GHSA-3496-9g83-7v6x`, `CVE-2026-59894`, `PYSEC-2026-3696` · PyPI `sqlparse`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 6.2 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0](https://agentprime.io/advisories/CVE-2026-74253.md)
  `CVE-2026-74253` · CVE record: regularlabs.com Sourcerer extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Pyt...](https://agentprime.io/advisories/PYSEC-2026-3727.md)
  `PYSEC-2026-3727`, `CVE-2026-74899` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [code-projects Online Shopping System offersmail.php cross site scripting](https://agentprime.io/advisories/CVE-2026-19998.md)
  `CVE-2026-19998` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Webkul Bagisto RMA Message send-message cross site scripting](https://agentprime.io/advisories/CVE-2026-19995.md)
  `CVE-2026-19995` · CVE record: Webkul Bagisto · CVSS 5.1 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [GL.iNet XE3000 Language Update ui.update_langs code injection](https://agentprime.io/advisories/CVE-2026-19980.md)
  `CVE-2026-19980` · CVE record: GL.iNet A1300 and 4 more · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Other injection, Code injection
- [An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.](https://agentprime.io/advisories/CVE-2026-67961.md)
  `CVE-2026-67961` · CVE record · CVSS 7.8 High · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components](https://agentprime.io/advisories/CVE-2026-67960.md)
  `CVE-2026-67960` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module](https://agentprime.io/advisories/CVE-2026-67926.md)
  `CVE-2026-67926` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components](https://agentprime.io/advisories/CVE-2026-67919.md)
  `CVE-2026-67919` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.](https://agentprime.io/advisories/CVE-2026-50772.md)
  `CVE-2026-50772` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.](https://agentprime.io/advisories/CVE-2026-38165.md)
  `CVE-2026-38165` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Code injection
- [Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection](https://agentprime.io/advisories/CVE-2026-19964.md)
  `CVE-2026-19964` · CVE record: Jij-Inc Jij-MCP-Server · CVSS 5.1 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection
- [iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection](https://agentprime.io/advisories/CVE-2026-19958.md)
  `CVE-2026-19958` · CVE record: iatsiuk pptr-mcp · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection
- [WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine](https://agentprime.io/advisories/CVE-2026-17581.md)
  `CVE-2026-17581` · CVE record: kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce · CVSS 7.2 High · Not analysed yet · Published 16 Aug 2026 · Tags: Code injection
- [Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Nam…](https://agentprime.io/advisories/CVE-2026-18385.md)
  `CVE-2026-18385` · CVE record: properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress · CVSS 5.4 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Code injection
- [DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection](https://agentprime.io/advisories/CVE-2026-19932.md)
  `CVE-2026-19932` · CVE record: DefaultFuction Notice-System-Managent · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Other injection, Code injection
- [OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine](https://agentprime.io/advisories/CVE-2026-19929.md)
  `CVE-2026-19929` · CVE record: OpenBoxes · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Code injection, CWE-791
- [code-projects Online Shopping System checkout.php cross site scripting](https://agentprime.io/advisories/CVE-2026-19922.md)
  `CVE-2026-19922` · CVE record: code-projects Online Shopping System · CVSS 5.1 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Online Food Order System edit_food_items.php cross site scripting](https://agentprime.io/advisories/CVE-2026-19916.md)
  `CVE-2026-19916` · CVE record: code-projects Online Food Order System · CVSS 5.1 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting](https://agentprime.io/advisories/CVE-2026-19904.md)
  `CVE-2026-19904` · CVE record: SourceCodester Online Book Store System · CVSS 4.8 Medium · Not analysed yet · Published 15 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection
- [mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"](https://agentprime.io/advisories/GHSA-h84g-69h7-mw6v.md)
  `GHSA-h84g-69h7-mw6v`, `CVE-2026-55153` · Maven `com.mchange:mchange-commons-java`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 7.1 High · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection, Insecure deserialization
- [ImpressCMS Authenticated RCE via PHP Custom Tag eval()](https://agentprime.io/advisories/CVE-2026-73679.md)
  `CVE-2026-73679` · CVE record: ImpressCMS ImpressCMS · CVSS 8.6 High · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()](https://agentprime.io/advisories/CVE-2026-73678.md)
  `CVE-2026-73678` · CVE record: MindsDB Minds Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2026-19626.md)
  `CVE-2026-19626` · CVE record: Tenable, Inc. Security Center · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [Code injection in Devolutions PowerShell Universal](https://agentprime.io/advisories/CVE-2026-19768.md)
  `CVE-2026-19768` · CVE record: Devolutions PowerShell Universal · CVSS 8.1 High · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [Duplicate Advisory: Remote code execution via .zip file upload in Grav CMS](https://agentprime.io/advisories/GHSA-wvxr-6v52-gfmh.md)
  `GHSA-wvxr-6v52-gfmh` · Packagist `getgrav/grav`: affected `*`, no fixed version yet · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [Grav CMS before 2.0.13 Remote Code Execution via Twig](https://agentprime.io/advisories/CVE-2026-72827.md)
  `CVE-2026-72827` · CVE record: getgrav grav · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection
- [Improper Control of Generation of Code in Fleet Server Leading to Code Injection](https://agentprime.io/advisories/CVE-2026-72676.md)
  `CVE-2026-72676` · CVE record: Elastic Fleet Server · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add\_…](https://agentprime.io/advisories/CVE-2026-13051.md)
  `CVE-2026-13051` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catal…](https://agentprime.io/advisories/CVE-2026-13048.md)
  `CVE-2026-13048` · CVE record · CVSS 8.2 High · Not analysed yet · Published 13 Aug 2026 · Tags: Path traversal, Code injection
- [HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because \_apply_actions and add_error use error message text built from request data…](https://agentprime.io/advisories/CVE-2022-4993.md)
  `CVE-2022-4993` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability](https://agentprime.io/advisories/CVE-2026-61962.md)
  `CVE-2026-61962` · CVE record: Hakan Ozevin WP BASE Booking · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-27544.md)
  `CVE-2026-27544` · CVE record: QuarkA QA Analytics · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Duplicate Advisory: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass](https://agentprime.io/advisories/GHSA-x3jw-7gj7-qv6m.md)
  `GHSA-x3jw-7gj7-qv6m` · PyPI `flowise`: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Sandbox Escape to RCE](https://agentprime.io/advisories/CVE-2026-73602.md)
  `CVE-2026-73602` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Remote Code Execution via Custom MCP](https://agentprime.io/advisories/CVE-2026-73601.md)
  `CVE-2026-73601` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV](https://agentprime.io/advisories/CVE-2026-73486.md)
  `CVE-2026-73486` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [Flowise before 3.1.3 Remote Code Execution via Airtable Agent](https://agentprime.io/advisories/CVE-2026-73485.md)
  `CVE-2026-73485` · CVE record: FlowiseAI Flowise · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes](https://agentprime.io/advisories/CVE-2026-19135.md)
  `CVE-2026-19135` · CVE record: The OpenNMS Group Meridian and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)](https://agentprime.io/advisories/CVE-2026-0298.md)
  `CVE-2026-0298` · CVE record: Palo Alto Networks GlobalProtect App · CVSS 5.2 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep.](https://agentprime.io/advisories/CVE-2026-67986.md)
  `CVE-2026-67986` · CVE record · CVSS 8.4 High · Not analysed yet · Published 13 Aug 2026 · Tags: Code injection
- [IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-13094.md)
  `CVE-2026-13094` · CVE record: IBM i Access Client Solutions · CVSS 7.8 High · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection
- [MCP-for-Stata: Stata Command Injection via Unsanitized \`package\` in \`ado_package_install\`](https://agentprime.io/advisories/GHSA-49m4-vp58-wgc9.md)
  `GHSA-49m4-vp58-wgc9`, `CVE-2026-55071`, `PYSEC-2026-3700` · PyPI `stata-mcp`: affected `<1.19.0`, fixed in `1.19.0` · CVSS 8.4 High · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection
- [Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injection](https://agentprime.io/advisories/CVE-2026-73268.md)
  `CVE-2026-73268` · CVE record: Red Hat multicluster engine for Kubernetes 2.10 and 4 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection
- [CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action](https://agentprime.io/advisories/CVE-2026-73330.md)
  `CVE-2026-73330` · CVE record: owen2345 CamaleonCMS · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection
- [WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.](https://agentprime.io/advisories/CVE-2026-65941.md)
  `CVE-2026-65941` · CVE record: Progress Software Corporation WhatsUp Gold · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal, Code injection, Authentication bypass, Server-side request forgery (SSRF)
- [Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag](https://agentprime.io/advisories/CVE-2026-73291.md)
  `CVE-2026-73291` · CVE record: seerr-team seerr · CVSS 7.1 High · Not analysed yet · Published 12 Aug 2026 · Tags: Path traversal, Code injection
- [Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8](https://agentprime.io/advisories/CVE-2026-67282.md)
  `CVE-2026-67282` · CVE record: fabrikar.com Fabrik extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection
- [WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action](https://agentprime.io/advisories/CVE-2026-16051.md)
  `CVE-2026-16051` · CVE record: Unknown wpmudev-updates · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2026 · Tags: Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTA4LTEyVDA2OjAwOjE0LjY0NTAwMFoiLCJDVkUtMjAyNi0xNjA1MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTA4LTE4VDEzOjU5OjExLjM5NTAwMFoiLCJDVkUtMjAyNi0zMjQ0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTA4LTE4VDEzOjU5OjExLjM5NTAwMFoiLCJDVkUtMjAyNi0zMjQ0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.