# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers](https://agentprime.io/advisories/CVE-2026-100159.md)
  `CVE-2026-100159` · CVE record: ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups · CVSS 4.8 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Code injection
- [Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection](https://agentprime.io/advisories/CVE-2026-111237.md)
  `CVE-2026-111237` · CVE record: Ultralytics FastSAM · CVSS 4.8 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Code injection
- [ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection](https://agentprime.io/advisories/CVE-2026-111212.md)
  `CVE-2026-111212` · CVE record: ImprintLab Medical-SAM-Adapter · CVSS 2.4 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Code injection
- [An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content.](https://agentprime.io/advisories/CVE-2026-95183.md)
  `CVE-2026-95183` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Oct 2026 · Tags: Code injection
- [Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway p…](https://agentprime.io/advisories/CVE-2026-108334.md)
  `CVE-2026-108334` · CVE record: Red Hat Red Hat Connectivity Link 1.4 and 3 more · CVSS 7.4 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates](https://agentprime.io/advisories/CVE-2026-55240.md)
  `CVE-2026-55240` · CVE record: msgbyte tianji · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)](https://agentprime.io/advisories/CVE-2026-55467.md)
  `CVE-2026-55467` · CVE record: OpenPrinting cups · CVSS 2.5 Low · Not analysed yet · Published 15 Oct 2026 · Tags: Other injection, Code injection, CWE-150
- [Ansible-operator-plugins: ansible operator plugins: arbitrary code execution via jinja2 template injection](https://agentprime.io/advisories/CVE-2026-92982.md)
  `CVE-2026-92982` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 and 4 more · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint](https://agentprime.io/advisories/CVE-2026-97666.md)
  `CVE-2026-97666` · CVE record: Sonatype Nexus Repository 3 · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [Template injection in WebPros SolusVM 2](https://agentprime.io/advisories/CVE-2026-105474.md)
  `CVE-2026-105474` · CVE record: WebPros SolusVM 2 · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [WordPress Broken Link Checker plugin <= 2.4.14.1 - Content Injection vulnerability](https://agentprime.io/advisories/CVE-2026-102389.md)
  `CVE-2026-102389` · CVE record: WPMU DEV Broken Link Checker · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode Template](https://agentprime.io/advisories/CVE-2026-86803.md)
  `CVE-2026-86803` · CVE record: oceanwp Ocean Extra · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.](https://agentprime.io/advisories/CVE-2026-104586.md)
  `CVE-2026-104586` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection
- [WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection](https://agentprime.io/advisories/CVE-2026-55679.md)
  `CVE-2026-55679` · CVE record: LabRedesCefetRJ WeGIA · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, SQL injection, Code injection
- [Markdown Preview Enhanced: Remote Code Execution via VM Sandbox Escape in \`.crossnote/config.js\` and \`.crossnote/parser.js\`](https://agentprime.io/advisories/CVE-2026-54566.md)
  `CVE-2026-54566` · CVE record: shd101wyy vscode-markdown-preview-enhanced · CVSS 8.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Stirling-PDF: Remote Code Execution via H2](https://agentprime.io/advisories/CVE-2026-85714.md)
  `CVE-2026-85714` · CVE record: Stirling-Tools Stirling-PDF · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerability](https://agentprime.io/advisories/CVE-2026-108151.md)
  `CVE-2026-108151` · CVE record: PluginUs.Net MDTF · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [WordPress Salevo plugin <= 1.3.0 - Content Injection vulnerability](https://agentprime.io/advisories/CVE-2026-103081.md)
  `CVE-2026-103081` · CVE record: VillaTheme Salevo · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface](https://agentprime.io/advisories/CVE-2026-0322.md)
  `CVE-2026-0322` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 8.6 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking](https://agentprime.io/advisories/CVE-2026-108390.md)
  `CVE-2026-108390` · CVE record: hestiacp hestiacp · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection, Code injection, CWE-427
- [A remote code execution vulnerability exists within the Field UI module in Drupal core.](https://agentprime.io/advisories/DRUPAL-CORE-2026-014.md)
  `DRUPAL-CORE-2026-014`, `CVE-2026-108097` · Packagist `drupal/core`: affected `>=8.9.0, <10.6.19 || >=11.0.0, <11.3.19 || >=11.4.0, <11.4.10 || >=12.0.0-alpha1, <12.0.0-beta2`, fixed in `10.6.19`, `11.3.19`, `11.4.10`, `12.0.0-beta2` · CVSS 8.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS](https://agentprime.io/advisories/CVE-2026-86002.md)
  `CVE-2026-86002` · CVE record: dokku dokku · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Gitea reusable workflow secret exposure in pull_request_target](https://agentprime.io/advisories/CVE-2026-73800.md)
  `CVE-2026-73800` · CVE record: Gitea Gitea · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection, CWE-829
- [BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail](https://agentprime.io/advisories/CVE-2026-110593.md)
  `CVE-2026-110593` · CVE record: MicroPyramid BottleCRM · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability](https://agentprime.io/advisories/CVE-2026-103358.md)
  `CVE-2026-103358` · CVE record: VillaTheme Email Template Customizer for WooCommerce · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Affiliate Toolkit 3.8.7 - 3.9.0 - Contributor+ RCE via BladeOne @php Directive](https://agentprime.io/advisories/CVE-2026-86787.md)
  `CVE-2026-86787` · CVE record: Unknown affiliate-toolkit · CVSS 7.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection](https://agentprime.io/advisories/CVE-2026-110445.md)
  `CVE-2026-110445` · CVE record: TEAMPLUS TECHNOLOGY TeamPlus Messenger · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection](https://agentprime.io/advisories/CVE-2026-110444.md)
  `CVE-2026-110444` · CVE record: TEAMPLUS TECHNOLOGY TeamPlus Messenger · CVSS 8.6 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Click to Chat <= 4.44 - Unauthenticated Arbitrary Shortcode Execution via REQUEST_URI via {url} Placeholder](https://agentprime.io/advisories/CVE-2026-92097.md)
  `CVE-2026-92097` · CVE record: holithemes Click to Chat – HoliThemes · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection
- [Microsoft Security Advisory CVE-2026-102870 - ASP.NET Core Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-g27p-qf6j-c96c.md)
  `GHSA-g27p-qf6j-c96c`, `CVE-2026-102870` · NuGet `Microsoft.AspNetCore.Components.WebAssembly.Server`: affected `>=10.0.0, <10.0.14 || >=11.0.0-preview.1, <11.0.0-rc.3.26522.148`, fixed in `10.0.14`, `11.0.0-rc.3.26522.148` · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-106624.md)
  `CVE-2026-106624` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-106621.md)
  `CVE-2026-106621` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-105903.md)
  `CVE-2026-105903` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php](https://agentprime.io/advisories/CVE-2026-63146.md)
  `CVE-2026-63146` · CVE record: Omnispace Agora Project · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Windows Assigned Access Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96220.md)
  `CVE-2026-96220` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Windows Performance Monitor Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85359.md)
  `CVE-2026-85359` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Windows Encrypting File System (EFS) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-83759.md)
  `CVE-2026-83759` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Microsoft Office SharePoint Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-102863.md)
  `CVE-2026-102863` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Visual Studio Tools for Applications and SQL Server Management Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-103572.md)
  `CVE-2026-103572` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.14 and 1 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)](https://agentprime.io/advisories/CVE-2026-103849.md)
  `CVE-2026-103849` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema enum symbols can inject statements through generated member names](https://agentprime.io/advisories/CVE-2026-108385.md)
  `CVE-2026-108385` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string](https://agentprime.io/advisories/CVE-2026-108384.md)
  `CVE-2026-108384` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema enum field defaults can inject statements into generated modules](https://agentprime.io/advisories/CVE-2026-108383.md)
  `CVE-2026-108383` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema allows code injection through generated enum-symbol string literals](https://agentprime.io/advisories/CVE-2026-108382.md)
  `CVE-2026-108382` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema pydantic-class metadata allows code injection in generated annotations](https://agentprime.io/advisories/CVE-2026-108381.md)
  `CVE-2026-108381` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions](https://agentprime.io/advisories/CVE-2026-108380.md)
  `CVE-2026-108380` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema fixed namespaces allow code injection in generated annotations](https://agentprime.io/advisories/CVE-2026-108379.md)
  `CVE-2026-108379` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema record documentation can terminate generated class docstrings](https://agentprime.io/advisories/CVE-2026-108378.md)
  `CVE-2026-108378` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema allows code injection through generated Meta.schema_name](https://agentprime.io/advisories/CVE-2026-108377.md)
  `CVE-2026-108377` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema allows code injection through record names in generated default factories](https://agentprime.io/advisories/CVE-2026-108376.md)
  `CVE-2026-108376` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [dataclasses-avroschema allows code injection through generated field-default literals](https://agentprime.io/advisories/CVE-2026-108375.md)
  `CVE-2026-108375` · CVE record: marcosschroh dataclasses-avroschema · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation](https://agentprime.io/advisories/CVE-2026-104126.md)
  `CVE-2026-104126` · CVE record: jumpserver jumpserver · CVSS 6.0 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater](https://agentprime.io/advisories/CVE-2026-55695.md)
  `CVE-2026-55695` · CVE record: fearlessgeekmedia FearlessCMS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Fixed values in MongoDB Server $bucket stage may be misread as field references](https://agentprime.io/advisories/CVE-2026-103965.md)
  `CVE-2026-103965` · CVE record: MongoDB MongoDB Server · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets](https://agentprime.io/advisories/CVE-2026-55675.md)
  `CVE-2026-55675` · CVE record: saltyorg docs · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection, CWE-829, CWE-1357
- [heym Python Tool Sandbox Escape](https://agentprime.io/advisories/CVE-2026-55376.md)
  `CVE-2026-55376` · CVE record: heymrun heym · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Command injection, Code injection, CWE-693
- [Eval injection in NVIDIA Isaac Lab](https://agentprime.io/advisories/CVE-2026-65141.md)
  `CVE-2026-65141` · CVE record: NVIDIA Isaac Lab · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [Eval injection in Siemens SIMATIC Drive Controller CPU 1504D TF and others](https://agentprime.io/advisories/CVE-2026-63350.md)
  `CVE-2026-63350` · CVE record: Siemens SIMATIC Drive Controller CPU 1504D TF and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection
- [storyicon comfyui_segment_anything GroundingDINO Model Loading slconfig.py SLConfig.\_file2dict code injection](https://agentprime.io/advisories/CVE-2026-108962.md)
  `CVE-2026-108962` · CVE record: storyicon comfyui_segment_anything · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Other injection, Code injection
- [PaddlePaddle PaddleX Preprocessor processors.py NormalizeImage.\_\_init\_\_ code injection](https://agentprime.io/advisories/CVE-2026-108961.md)
  `CVE-2026-108961` · CVE record: PaddlePaddle PaddleX · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2026 · Tags: Other injection, Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTEwLTEzVDAzOjE1OjE2LjIyNDAwMFoiLCJDVkUtMjAyNi0xMDg5NjEiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTEwLTE2VDA0OjI2OjU4LjE1NzAwMFoiLCJDVkUtMjAyNi05NjU2MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTEwLTE2VDA0OjI2OjU4LjE1NzAwMFoiLCJDVkUtMjAyNi05NjU2MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.