Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.7 High
JAIOTlink C492A-W6 4.8.30.57701411 RCE via /Anyka/config Endpoint
- JAIOTlink C492A-W6 Wi-Fi IP Camera
- Code injection
- CVSS 5.9 Medium
Remote Code Execution via Unsafe Deserialization in LogItem Import
- Wikimedia Foundation MediaWiki
- Code injection
- Insecure deserialization
- CVSS 0.0 None
Full RCE using EasyTimeline Extension
- Wikimedia Foundation timeline
- Code injection
- CVSS 7.8 High
Code injection in NVIDIA Megatron-Bridge
- NVIDIA Megatron-Bridge
- Code injection
- CVSS 7.8 High
Code injection in NVIDIA Megatron-Bridge
- NVIDIA Megatron-Bridge
- Code injection
- CVSS 7.8 High
Unsafe reflection in NVIDIA Megatron-Bridge
- NVIDIA Megatron-Bridge
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Langflow: Code Injection Vulnerability in Code Validation Endpoint
- Code injection
>=1.0.0, <1.10.1.rc0 · fixed in 1.10.1.rc0
GHSA-v798-mcc6-2m3m · CVE-2026-7873 - CVSS 9.3 CriticalCritical · CVSS 9+
txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter
- neuml txtai
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
IBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handling
- IBM Db2
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows
- IBM Langflow OSS
- Code injection
- CVSS 7.5 High
IBM WebSphere eXtreme Scale's OQL is affected by remote code execution
- IBM WebSphere Extreme Scale
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators
- conductor
- Code injection
- CVSS 6.8 Medium
Code injection in Siemens Mendix Studio Pro 10.11 and others
- Siemens Mendix Studio Pro 10.11
- Siemens Mendix Studio Pro 10.12
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path
- hiyouga LlamaFactory
- Code injection
- CWE-829
- CVSS 8.8 High
Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection
- Snowflake CLI
- Code injection
- CVSS 5.1 Medium
SourceCodester Inventory Management System User Registration Endpoint users_handler.php cross site scripting
- SourceCodester Inventory Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
code-projects Online Music Site POST Request Feedback.php cross site scripting
- code-projects Online Music Site
- Cross-site scripting (XSS)
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
- Code injection
>=2.0.0rc2, <3.3.0 · fixed in 3.3.0
GHSA-f49j-v924-fx9w · CVE-2026-44181 - CVSS 9.3 CriticalCritical · CVSS 9+
python-statemachine SCXML <data expr> Eval Injection
- Code injection
>=3.0.0, <3.2.0 · fixed in 3.2.0
GHSA-v4jc-pm6r-3vj8 · CVE-2026-47103 - CVSS 9.8 CriticalCritical · CVSS 9+
Salesforce Uni2TS has a Code Injection vulnerability
- Code injection
<2.0.0 · fixed in 2.0.0
GHSA-7x99-8x99-xc54 · CVE-2026-22584 - CVSS 9.4 CriticalCritical · CVSS 9+
Langroid has WAF Bypass Leading to RCE in TableChatAgent
- Code injection
<0.59.32 · fixed in 0.59.32
GHSA-x34r-63hx-w57f · CVE-2026-25481 - CVSS 9.1 CriticalCritical · CVSS 9+
OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection
- Code injection
<12.0.1 || >=13.0.0.0rc1, <13.0.1 || >=14.0.0.0rc1, <14.0.1 || >=15.0.0.0rc1, <15.0.1 · fixed in 12.0.1, 13.0.1, 14.0.1, 15.0.1
GHSA-8xwf-cr4r-856r · CVE-2026-28370 - CVSS 9.8 CriticalCritical · CVSS 9+
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument
- Code injection
<=0.27.1 · no fixed version yet
GHSA-g76p-4vg5-f4qh · CVE-2026-31236 - CVSS 9.4 CriticalCritical · CVSS 9+
PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection
- Path traversal
- Code injection
<4.6.34 · fixed in 4.6.34
GHSA-9mqq-jqxf-grvw · CVE-2026-44336 - CVSS 9.8 CriticalCritical · CVSS 9+
PySyft server-side arbitrary Python execution after code approval
- Code injection
<=0.9.5 · no fixed version yet
GHSA-cfpg-c974-jfhq · CVE-2026-31220 - CVSS 9.8 CriticalCritical · CVSS 9+
PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution
- Code injection
- Authentication bypass
<4.6.40 · fixed in 4.6.40
GHSA-vg22-4gmj-prxw · CVE-2026-47391 - CVSS 9.8 CriticalCritical · CVSS 9+
PraisonAI has critical RCE via `type: job` workflow YAML
- Command injection
- Code injection
<4.5.139 · fixed in 4.5.139
GHSA-vc46-vw85-3wvm · CVE-2026-40288 - CVSS 9.8 CriticalCritical · CVSS 9+
Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
- Code injection
<1.2.3 · fixed in 1.2.3
GHSA-gjgx-rvqr-6w6v · CVE-2026-33057 - CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint
- Code injection
- Authentication bypass
<1.9.0 · fixed in 1.9.0
GHSA-vwmf-pq79-vjvx · CVE-2026-33017 - CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Code Injection in pyload-ng
- Code injection
<0.5.0b3.dev31 · fixed in 0.5.0b3.dev31
GHSA-pf38-5p22-x6h6 · CVE-2023-0297 - CVSS 9.8 CriticalCritical · CVSS 9+
vanna vulnerable to remote code execution caused by prompt injection
- Code injection
<=0.6.2 · no fixed version yet
GHSA-rrqq-fv6m-692m · CVE-2024-5826 - CVSS 9.8 CriticalCritical · CVSS 9+
LlamaIndex includes an exec call for `import {cls_name}`
- Code injection
<0.10.38 · fixed in 0.10.38
GHSA-fxc2-8m62-m85x · CVE-2024-45201 - CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Vanna prompt injection code execution
- Code injection
<=0.5.5 · no fixed version yet
GHSA-7735-w2jp-gvg6 · CVE-2024-5565 - CVSS 9.1 CriticalCritical · CVSS 9+
pgadmin4 has a Meta-Command Filter Command Execution
- Code injection
<9.11 · fixed in 9.11
GHSA-fxmw-jcgr-w44v · CVE-2025-13780 - CVSS 9.1 CriticalCritical · CVSS 9+
Rasa Allows Remote Code Execution via Remote Model Loading
- Code injection
- Insecure deserialization
<3.6.21 · fixed in 3.6.21
GHSA-cpv4-ggrr-7j9v · CVE-2024-49375 - CVSS 7.6 HighCritical · CVSS 7+ and EPSS
smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
- Code injection
<1.17.0 · fixed in 1.17.0
GHSA-6v92-r5mx-h5fx · CVE-2025-5120 - CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode
- Code injection
<9.10 · fixed in 9.10
GHSA-w2p4-p4rh-qcm3 · CVE-2025-12762 - CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
pgAdmin 4 Vulnerable to Remote Code Execution
- Code injection
<9.2 · fixed in 9.2
GHSA-g73c-fw68-pwx3 · CVE-2025-2945 - CVSS 5.1 Medium
CodeAstro Complaint Management System Report addreport cross site scripting
- CodeAstro Complaint Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting
- itsourcecode Online Hotel Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting
- itsourcecode Online Hotel Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting
- itsourcecode Online Hotel Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
GotoHTTP reg.12x cross site scripting
- GotoHTTP
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component
- Code injection
- CVSS 5.1 Medium
code-projects Project Management System Mail Compose mail.php cross site scripting
- code-projects Project Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.9 Medium
antlr ANTLR4 Grammar Action Block OutputFile.java code injection
- ANTLR4
- Other injection
- Code injection
- CVSS 5.3 Medium
yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting
- yashpokharna2555 restaurent-management-system
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.4 High
Statamic CMS's unsafe method invocation via collection sorting allows data destruction
- Code injection
<5.73.23 || >=6.0.0, <6.20.0 · fixed in 5.73.23, 6.20.0
GHSA-m92m-r54r-x8r2 · CVE-2026-49287 - CVSS 10.0 CriticalCritical · CVSS 9+
Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass
- kestra
- Code injection
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
- Path traversal
- Code injection
<1.19.3 · fixed in 1.19.3
GHSA-44hj-4m45-frj3 · CVE-2026-44024 - CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
- dokku
- Code injection
- CVSS 8.5 High
WordPress Blocksy Companion Pro plugin <= 2.1.45 - Remote Code Execution (RCE) vulnerability
- Creative Themes Blocksy Companion Pro
- Code injection
- CVSS 7.1 High
Code injection in Trellix Network Security NX, EX, FX, AX, and CMS
- Trellix Network Security NX, EX, FX, AX, and CMS
- Code injection
- CVSS 8.8 High
Code injection in Revive Adserver
- Revive Adserver
- Code injection
- CVSS 6.3 Medium
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
- Code injection
- Insecure deserialization
<2.5.301 || >=3.0, <3.1.7 · fixed in 2.5.301, 3.1.7
GHSA-qhmf-xw27-6rqr · CVE-2026-48517 - CVSS 8.2 High
MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows
- Memory corruption
- Denial of service
>=3.0, <3.1.7 · fixed in 3.1.7
GHSA-382j-8mxh-c7x2 · CVE-2026-48502 - CVSS 9.4 CriticalCritical · CVSS 9+
ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Execution
- ToolJet
- Code injection
- CVSS 5.7 Medium
Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
- vim
- Command injection
- Code injection
- CVSS 8.4 High
Vim: Arbitrary Code Execution via Python Omni-Completion Docstrings
- vim
- Code injection
- CVSS 8.5 High
WordPress Post Snippets plugin <= 4.0.19 - Remote Code Execution (RCE) vulnerability
- Post Snippets
- Code injection