# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once](https://agentprime.io/advisories/CVE-2026-82278.md) `CVE-2026-82278` · CVE record: dataelement bisheng · CVSS 8.7 High · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection - [Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data](https://agentprime.io/advisories/GHSA-jw39-3688-r4rx.md) `GHSA-jw39-3688-r4rx`, `CVE-2026-54757`, `PYSEC-2026-3817` · PyPI `compliance-trestle`: affected `<3.12.4 || >=4.0.0, <4.1.0`, fixed in `3.12.4`, `4.1.0` · CVSS 7.8 High · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection - [PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector](https://agentprime.io/advisories/CVE-2026-82078.md) `CVE-2026-82078` · CVE record: PaperCut PaperCut MF/NG · CVSS 9.4 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.63 · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection - [Budibase before 3.41.3 Remote Code Execution via Plugin eval()](https://agentprime.io/advisories/CVE-2026-82244.md) `CVE-2026-82244` · CVE record: budibase server · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection - [LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint](https://agentprime.io/advisories/GHSA-6wvf-77m9-58rm.md) `GHSA-6wvf-77m9-58rm`, `CVE-2026-37004`, `PYSEC-2026-3861` · PyPI `litellm`: affected `<1.83.7`, fixed in `1.83.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection](https://agentprime.io/advisories/CVE-2026-81835.md) `CVE-2026-81835` · CVE record: RooCodeInc Roo-Code · CVSS 5.1 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection, Code injection - [RooCodeInc Roo-Code README File ExecaTerminalProcess code injection](https://agentprime.io/advisories/CVE-2026-81834.md) `CVE-2026-81834` · CVE record: RooCodeInc Roo-Code · CVSS 5.3 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection, Code injection - [RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection](https://agentprime.io/advisories/CVE-2026-81833.md) `CVE-2026-81833` · CVE record: RooCodeInc Roo-Code · CVSS 5.1 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection, Code injection - [Trilium: Note Import to RCE via Book Note](https://agentprime.io/advisories/CVE-2026-53579.md) `CVE-2026-53579` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml](https://agentprime.io/advisories/CVE-2026-53578.md) `CVE-2026-53578` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Unauthenticated Remote Code Execution in GraphQL Composite Data API](https://agentprime.io/advisories/CVE-2026-18885.md) `CVE-2026-18885` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [Sandbox Escape in ServiceNow AI Platform](https://agentprime.io/advisories/CVE-2026-6876.md) `CVE-2026-6876` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection, CWE-693, CWE-1284 - [Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client](https://agentprime.io/advisories/CVE-2026-48996.md) `CVE-2026-48996` · CVE record: TriliumNext Trilium · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was co...](https://agentprime.io/advisories/GHSA-587j-4r3v-cm2c.md) `GHSA-587j-4r3v-cm2c`, `CVE-2026-81719`, `PYSEC-2026-3802` · PyPI `openssl-encrypt`: affected `<1.4.9`, fixed in `1.4.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template](https://agentprime.io/advisories/GHSA-39mm-rwm3-29jp.md) `GHSA-39mm-rwm3-29jp`, `CVE-2026-54718`, `PKSA-x4kf-7gbb-fh93` · Packagist `symbiote/silverstripe-advancedworkflow`: affected `<6.4.5 || >=7.0.0, <7.1.3 || >=7.2.0, <7.2.1`, fixed in `6.4.5`, `7.1.3`, `7.2.1` · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection, CWE-20 - [silverstripe/userforms vulnerable to remote code execution via userforms email subject](https://agentprime.io/advisories/GHSA-g8wr-r2v2-vqc6.md) `GHSA-g8wr-r2v2-vqc6`, `CVE-2026-54721`, `PKSA-g6zg-78xs-c8r8` · Packagist `silverstripe/userforms`: affected `<6.4.9 || >=7.0.0, <7.0.7 || >=7.1.0, <7.1.1`, fixed in `6.4.9`, `7.0.7`, `7.1.1` · CVSS 8.8 High · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection, CWE-20 - [Trilium: RCE via \`shareTemplate\` relation missing \`isDangerous\` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)](https://agentprime.io/advisories/CVE-2026-47727.md) `CVE-2026-47727` · CVE record: TriliumNext Trilium · CVSS 8.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape](https://agentprime.io/advisories/CVE-2026-81096.md) `CVE-2026-81096` · CVE record: mims-harvard ToolUniverse · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection](https://agentprime.io/advisories/CVE-2026-81743.md) `CVE-2026-81743` · CVE record: flowintel flowintel · CVSS 7.5 High · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal, Code injection - [Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys](https://agentprime.io/advisories/CVE-2026-81662.md) `CVE-2026-81662` · CVE record: flowintel flowintel · CVSS 8.6 High · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection, CWE-20 - [Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite](https://agentprime.io/advisories/CVE-2026-19225.md) `CVE-2026-19225` · CVE record: Unknown Defender Security · CVSS 6.6 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite](https://agentprime.io/advisories/CVE-2026-19223.md) `CVE-2026-19223` · CVE record: Unknown Smush · CVSS 7.2 High · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.](https://agentprime.io/advisories/CVE-2026-75357.md) `CVE-2026-75357` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.](https://agentprime.io/advisories/CVE-2026-37003.md) `CVE-2026-37003` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Code injection - [whichllm < 0.5.16 Code Injection via run and snippet commands](https://agentprime.io/advisories/CVE-2026-58474.md) `CVE-2026-58474` · CVE record: Andyyyy64 whichllm · CVSS 8.6 High · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [cakephp/debug_kit: MailPreview contains unsafe reflection](https://agentprime.io/advisories/GHSA-p46m-g734-vpc4.md) `GHSA-p46m-g734-vpc4`, `CVE-2026-54614`, `PKSA-8d84-6pxy-6g1s` · Packagist `cakephp/debug_kit`: affected `<4.10.3 || >=5.0.0, <5.2.4`, fixed in `4.10.3`, `5.2.4` · CVSS 4.3 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [senaite.core Vulnerable to Eval Injection and Missing Authorization](https://agentprime.io/advisories/GHSA-jrw6-7x4q-w25j.md) `GHSA-jrw6-7x4q-w25j`, `CVE-2026-54569`, `PYSEC-2026-3919` · PyPI `senaite-core`: affected `>=2.0.0, <=2.6.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection, Broken access control - [Eval Injection in google/langfun via default lf.query protocol](https://agentprime.io/advisories/CVE-2026-75062.md) `CVE-2026-75062` · CVE record: Google langfun · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection, CWE-1188 - [Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback](https://agentprime.io/advisories/CVE-2026-74851.md) `CVE-2026-74851` · CVE record: Unknown Pods · CVSS 7.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [Code injection in SASAKI Nobuyuki CorvusSKK](https://agentprime.io/advisories/CVE-2026-76148.md) `CVE-2026-76148` · CVE record: SASAKI Nobuyuki CorvusSKK · CVSS 8.4 High · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability.](https://agentprime.io/advisories/CVE-2026-75414.md) `CVE-2026-75414` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [JeecgBoot v3.9.2 is vulnerable to Remote command execution.](https://agentprime.io/advisories/CVE-2026-75411.md) `CVE-2026-75411` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the appl…](https://agentprime.io/advisories/CVE-2026-52103.md) `CVE-2026-52103` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Code injection - [code-projects Online Shopping System sumit_form.php cross site scripting](https://agentprime.io/advisories/CVE-2026-79793.md) `CVE-2026-79793` · CVE record: code-projects Online Shopping System · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Code injection in NVIDIA NemoClaw](https://agentprime.io/advisories/CVE-2026-65082.md) `CVE-2026-65082` · CVE record: NVIDIA NemoClaw · CVSS 7.0 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-79249.md) `CVE-2026-79249` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in \`PromptService.\_render_template\` via unsandboxed Jinja2 Environment](https://agentprime.io/advisories/GHSA-vwf3-4xxj-qg6h.md) `GHSA-vwf3-4xxj-qg6h` · PyPI `mcp-contextforge-gateway`: affected `<1.0.0`, fixed in `1.0.0` · No CVSS score · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy \`parse_expr()\`](https://agentprime.io/advisories/GHSA-q27q-98j4-9pfv.md) `GHSA-q27q-98j4-9pfv`, `CVE-2026-55585`, `PYSEC-2026-3914` · PyPI `qwed`: affected `<5.1.2`, fixed in `5.1.2` · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [qwed-mcp has Unsafe SymPy \`parse_expr()\` Remote Code Execution via Unsanitized Math Expression Input](https://agentprime.io/advisories/GHSA-mw6r-2hvm-4rp2.md) `GHSA-mw6r-2hvm-4rp2`, `CVE-2026-55546`, `PYSEC-2026-3915` · PyPI `qwed-mcp`: affected `<0.2.1`, fixed in `0.2.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration](https://agentprime.io/advisories/CVE-2026-79784.md) `CVE-2026-79784` · CVE record: gemelo-ai vocos · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code](https://agentprime.io/advisories/GHSA-hxmv-c4g6-5fqc.md) `GHSA-hxmv-c4g6-5fqc`, `CVE-2026-55522`, `PYSEC-2026-3891`, `PYSEC-2026-3903` · PyPI `praisonai` and 1 more: affected `>=3.9.26, <4.6.58`, fixed in `4.6.58` · CVSS 7.8 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection, CWE-426, CWE-829 - [WatchGuard Agent path traversal allows unauthenticated remote code execution](https://agentprime.io/advisories/CVE-2026-57909.md) `CVE-2026-57909` · CVE record: WatchGuard WatchGuard Agent · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection, Authentication bypass - [Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths](https://agentprime.io/advisories/CVE-2026-49845.md) `CVE-2026-49845` · CVE record: Apache Software Foundation Apache Hive · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)](https://agentprime.io/advisories/PKSA-xn4n-zch1-3zsy.md) `PKSA-xn4n-zch1-3zsy`, `CVE-2026-77129` · Packagist `derhansen/sf_event_mgt`: affected `<5.9.3 || >=6.0.0, <6.7.2 || >=7.0.0, <7.9.3 || >=8.0.0, <8.6.2 || >=9.0.0, <9.0.3`, fixed in `5.9.3`, `6.7.2`, `7.9.3`, `8.6.2`, `9.0.3` · CVSS 7.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)](https://agentprime.io/advisories/PKSA-dhfp-j236-nf9h.md) `PKSA-dhfp-j236-nf9h`, `CVE-2026-77136` · Packagist `in2code/powermail`: affected `<10.9.3 || >=11.0.0, <12.6.1 || >=13.0.0, <13.2.1`, fixed in `10.9.3`, `12.6.1`, `13.2.1` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution](https://agentprime.io/advisories/CVE-2026-78654.md) `CVE-2026-78654` · CVE record: cleverbrush framework and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection, Prototype pollution - [Grav before 4.2.2 Remote Code Execution via Email Twig](https://agentprime.io/advisories/CVE-2026-75574.md) `CVE-2026-75574` · CVE record: getgrav grav · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO](https://agentprime.io/advisories/CVE-2026-56703.md) `CVE-2026-56703` · CVE record: vrana adminer · CVSS 8.6 High · Not analysed yet · Published 25 Aug 2026 · Tags: Code injection - [mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server](https://agentprime.io/advisories/GHSA-xm98-3vcf-fph7.md) `GHSA-xm98-3vcf-fph7`, `CVE-2026-53710`, `PYSEC-2026-3862` · PyPI `mcp-contextforge-gateway`: affected `<1.0.2`, fixed in `1.0.2` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, CWE-693 - [Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences](https://agentprime.io/advisories/CVE-2026-40877.md) `CVE-2026-40877` · CVE record: Combodo iTop · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Insecure deserialization - [Combodo iTop: Remote code execution using external auth variable value](https://agentprime.io/advisories/CVE-2026-39975.md) `CVE-2026-39975` · CVE record: Combodo iTop · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection - [AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass](https://agentprime.io/advisories/CVE-2026-76836.md) `CVE-2026-76836` · CVE record: AzuraCast AzuraCast · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Broken access control - [Rpm: rpmbuild gettarspec() crafted tar member name → macro injection](https://agentprime.io/advisories/CVE-2026-78367.md) `CVE-2026-78367` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection - [Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders](https://agentprime.io/advisories/CVE-2026-76841.md) `CVE-2026-76841` · CVE record: xorbitsai inference · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection - [Piwigo Public Authentication cross site scripting](https://agentprime.io/advisories/CVE-2026-78187.md) `CVE-2026-78187` · CVE record: Piwigo · CVSS 2.3 Low · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [ractivejs ractive Keypath Ractive#set prototype pollution](https://agentprime.io/advisories/CVE-2026-78181.md) `CVE-2026-78181` · CVE record: ractivejs ractive · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Prototype pollution - [Velociraptor Analyst overwrites live built-in artifacts through verify()](https://agentprime.io/advisories/CVE-2026-19200.md) `CVE-2026-19200` · CVE record: Rapid7 Velociraptor · CVSS 8.9 High · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Broken access control - [alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution](https://agentprime.io/advisories/CVE-2026-78180.md) `CVE-2026-78180` · CVE record: alibaba-fusion next · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Prototype pollution - [rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution](https://agentprime.io/advisories/CVE-2026-78179.md) `CVE-2026-78179` · CVE record: rexrainbow phaser3-rex-notes · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Prototype pollution - [jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution](https://agentprime.io/advisories/CVE-2026-78178.md) `CVE-2026-78178` · CVE record: jQWidgets · CVSS 6.9 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Code injection, Prototype pollution Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .