# CWE-829.

Every Advisory and CVE whose sources give the weakness CWE-829, newest first.

## Records, newest first

- [Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox](https://agentprime.io/advisories/CVE-2026-110802.md)
  `CVE-2026-110802` · CVE record: altair-graphql altair and 4 more · CVSS 6.1 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: Cross-site scripting (XSS), CWE-829
- [eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2026-123019.md)
  `CVE-2026-123019` · CVE record: eosphoros-ai DB-GPT · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-829
- [myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2026-122160.md)
  `CVE-2026-122160` · CVE record: myshell-ai AIlice · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-829
- [Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program](https://agentprime.io/advisories/CVE-2026-122135.md)
  `CVE-2026-122135` · CVE record: mistralai mistral-vibe · CVSS 8.6 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-829
- [Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers](https://agentprime.io/advisories/CVE-2026-122134.md)
  `CVE-2026-122134` · CVE record: mistralai mistral-vibe · CVSS 8.6 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-829
- [IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution](https://agentprime.io/advisories/CVE-2026-95649.md)
  `CVE-2026-95649` · CVE record: I.R.I.S S.A. IRISPowerscan · CVSS 6.1 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-829
- [Refitter: Unrestricted OpenAPI references permit build-host SSRF and file inclusion](https://agentprime.io/advisories/CVE-2026-63184.md)
  `CVE-2026-63184` · CVE record: christianhelle refitter · CVSS 7.1 High · Not analysed yet · Published 30 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-829
- [Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN](https://agentprime.io/advisories/CVE-2026-118762.md)
  `CVE-2026-118762` · CVE record: monkeytypegame monkeytype · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-829
- [FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability](https://agentprime.io/advisories/CVE-2023-7357.md)
  `CVE-2023-7357` · CVE record: Revera FlexNet Publisher · CVSS 8.6 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-829
- [Wildfly: wildfly-iiop: wildfly-ejb3: wildfly: authentication bypass on iiop ejb invocations as csiv2 ittprincipalname accepted without transport binding](https://agentprime.io/advisories/CVE-2026-114488.md)
  `CVE-2026-114488` · CVE record: Red Hat Red Hat Fuse 7 and 4 more · CVSS 7.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-829
- [Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization](https://agentprime.io/advisories/CVE-2026-15564.md)
  `CVE-2026-15564` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7 and 1 more · CVSS 7.4 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-829
- [Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap](https://agentprime.io/advisories/CVE-2026-84725.md)
  `CVE-2026-84725` · CVE record: Red Hat Red Hat JBoss Enterprise Application Platform 7 and 1 more · CVSS 8.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: CWE-829
- [RSS feed could redirect its subscription to a local file or network share](https://agentprime.io/advisories/CVE-2026-118178.md)
  `CVE-2026-118178` · CVE record: Mozilla Thunderbird · CVSS 5.7 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-829
- [Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment](https://agentprime.io/advisories/CVE-2026-118174.md)
  `CVE-2026-118174` · CVE record: Mozilla Thunderbird · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-829
- [vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution](https://agentprime.io/advisories/GHSA-h3rc-6mm3-gc2m.md)
  `GHSA-h3rc-6mm3-gc2m`, `CVE-2026-114053` · PyPI `vllm`: affected `>=0.7.3, <0.31.0`, fixed in `0.31.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Code injection, CWE-829
- [NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter…](https://agentprime.io/advisories/CVE-2026-65119.md)
  `CVE-2026-65119` · CVE record: NVIDIA TensorRT-LLM · CVSS 8.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-829
- [Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode](https://agentprime.io/advisories/CVE-2026-116843.md)
  `CVE-2026-116843` · CVE record: mistralai mistral-vibe · CVSS 8.7 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-829
- [InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2026-115802.md)
  `CVE-2026-115802` · CVE record: InternScience InternAgent · CVSS 5.3 Medium · Not analysed yet · Published 24 Oct 2026 · Tags: CWE-829
- [CloudPirates Open Source Helm Charts: pull_request_target workflow vulnerable to cache poisoning and OIDC token theft](https://agentprime.io/advisories/CVE-2026-54532.md)
  `CVE-2026-54532` · CVE record: CloudPirates-io helm-charts · CVSS 6.9 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-829
- [Black: GitHub Action installs unvalidated required-version from pyproject.toml](https://agentprime.io/advisories/GHSA-cg8m-r9f2-5wm2.md)
  `GHSA-cg8m-r9f2-5wm2`, `CVE-2026-114134` · PyPI `black`: affected `<26.10.1`, fixed in `26.10.1` · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-829
- [Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content…](https://agentprime.io/advisories/CVE-2026-114727.md)
  `CVE-2026-114727` · CVE record: Roundcube Webmail · CVSS 8.3 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-829
- [mk-oracle: Local privilege escalation via insecure Oracle Home library loading](https://agentprime.io/advisories/CVE-2026-113461.md)
  `CVE-2026-113461` · CVE record: Checkmk GmbH Checkmk · CVSS 5.2 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-426, CWE-829
- [Argo CD: A Kustomize Helm config home can run commands in the repo-server](https://agentprime.io/advisories/CVE-2026-113709.md)
  `CVE-2026-113709` · CVE record: argoproj argo-cd · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-829
- [This issue was addressed by enforcing library validation on the affected binaries.](https://agentprime.io/advisories/CVE-2026-86949.md)
  `CVE-2026-86949` · CVE record: Apple Xcode · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-829
- [Ivanti Connect Secure: Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts…](https://agentprime.io/advisories/CVE-2026-111357.md)
  `CVE-2026-111357` · CVE record: Ivanti Connect Secure · CVSS 7.0 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-829
- [Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash Pinning](https://agentprime.io/advisories/GHSA-pq7j-f95f-qfcv.md)
  `GHSA-pq7j-f95f-qfcv`, `CVE-2026-86063` · npm `@anthropic-ai/claude-code`: affected `<2.1.179`, fixed in `2.1.179` · CVSS 7.5 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-494, CWE-829
- [JetBrains Junie CLI: In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted…](https://agentprime.io/advisories/CVE-2026-111091.md)
  `CVE-2026-111091` · CVE record: JetBrains Junie CLI · CVSS 7.8 High · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-829
- [Gitea reusable workflow secret exposure in pull_request_target](https://agentprime.io/advisories/CVE-2026-73800.md)
  `CVE-2026-73800` · CVE record: Gitea Gitea · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Code injection, CWE-829
- [.NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-96237.md)
  `CVE-2026-96237` · CVE record: Microsoft .NET 10.0 runtime and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87695.md)
  `CVE-2026-87695` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Microsoft Office SharePoint Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70267.md)
  `CVE-2026-70267` · CVE record: Microsoft Microsoft SharePoint Server Subscription Edition · CVSS 7.2 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Windows Common Log File System Driver Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85355.md)
  `CVE-2026-85355` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets](https://agentprime.io/advisories/CVE-2026-55675.md)
  `CVE-2026-55675` · CVE record: saltyorg docs · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Code injection, CWE-829, CWE-1357
- [Omarchy: omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme…](https://agentprime.io/advisories/CVE-2026-108913.md)
  `CVE-2026-108913` · CVE record: Omarchy Omarchy · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2026 · Tags: CWE-829
- [Aegisub executes arbitrary code through automatically loaded Automation scripts](https://agentprime.io/advisories/CVE-2026-92705.md)
  `CVE-2026-92705` · CVE record: TypesettingTools Aegisub · CVSS 7.8 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-158, CWE-829
- [Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…](https://agentprime.io/advisories/CVE-2026-78019.md)
  `CVE-2026-78019` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-829
- [PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow](https://agentprime.io/advisories/GHSA-4gfv-wg42-7jw5.md)
  `GHSA-4gfv-wg42-7jw5`, `CVE-2026-61437`, `PYSEC-2026-4267` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.5 High · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-693, CWE-829
- [mk-oracle: Local privilege escalation via malicious Oracle Instant Client](https://agentprime.io/advisories/CVE-2026-105331.md)
  `CVE-2026-105331` · CVE record: Checkmk GmbH Checkmk · CVSS 5.2 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-426, CWE-829
- [Docling imports plugin entry points before the allow_external_plugins check](https://agentprime.io/advisories/GHSA-9jxx-vjrv-h2rq.md)
  `GHSA-9jxx-vjrv-h2rq`, `CVE-2026-105745`, `PYSEC-2026-4192`, `PYSEC-2026-4210` · PyPI `docling` and 1 more: affected `>=2.27.0, <2.131.0`, fixed in `2.131.0` · CVSS 6.7 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-696, CWE-829
- [Ghost: Remote Code Execution via Theme Translation Files](https://agentprime.io/advisories/GHSA-jj74-hc2q-xrvm.md)
  `GHSA-jj74-hc2q-xrvm`, `BIT-ghost-2026-104418`, `BIT-ghost-2026-105677`, `CVE-2026-104418`, `CVE-2026-105677` · npm `ghost`: affected `>=6.10.3, <6.64.0`, fixed in `6.64.0` · CVSS 8.6 High · Not analysed yet · Published 7 Oct 2026 · Tags: Path traversal, Code injection, CWE-829
- [knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json](https://agentprime.io/advisories/GHSA-mc52-mwq4-vfx3.md)
  `GHSA-mc52-mwq4-vfx3`, `CVE-2026-86540` · npm `knowns`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 8.5 High · Not analysed yet · Published 6 Oct 2026 · Tags: Command injection, Code injection, CWE-427, CWE-829
- [auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF](https://agentprime.io/advisories/CVE-2026-12171.md)
  `CVE-2026-12171` · CVE record: cookpete auto-changelog · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, Command injection, Code injection, Server-side request forgery (SSRF)
- [RCE via calcext:data-mappings, sql provider and jdbc connector](https://agentprime.io/advisories/CVE-2026-63277.md)
  `CVE-2026-63277` · CVE record: The Document Foundation LibreOffice · CVSS 8.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-829
- [Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution](https://agentprime.io/advisories/CVE-2026-104811.md)
  `CVE-2026-104811` · CVE record: Mitel Mitel MiVoice Office 400 · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Code injection, Unrestricted file upload, CWE-20, CWE-829
- [Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2026-104809.md)
  `CVE-2026-104809` · CVE record: Mitel Mitel MiVoice Office 400 · CVSS 8.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal, CWE-426, CWE-427, CWE-494
- [C4illin ConvertX: In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files…](https://agentprime.io/advisories/CVE-2026-105080.md)
  `CVE-2026-105080` · CVE record: C4illin ConvertX · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Oct 2026 · Tags: CWE-829
- [NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files](https://agentprime.io/advisories/CVE-2026-55251.md)
  `CVE-2026-55251` · CVE record: netbox-community devicetype-library · CVSS 6.5 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Code injection, CWE-494, CWE-829
- [CVE-2026-104056](https://agentprime.io/advisories/CVE-2026-104056.md)
  `CVE-2026-104056` · CVE record: Authlib Authlib · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-345, CWE-346, CWE-829
- [vm2 CLI provides no sandbox isolation - host-realm require() is reachable from sandboxed scripts](https://agentprime.io/advisories/GHSA-jxxv-8r27-vm4p.md)
  `GHSA-jxxv-8r27-vm4p`, `CVE-2026-92950` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: CWE-453, CWE-829, CWE-1188
- [vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package](https://agentprime.io/advisories/GHSA-c48m-32m9-vx93.md)
  `GHSA-c48m-32m9-vx93`, `CVE-2026-92951` · npm `vm2`: affected `<3.11.7`, fixed in `3.11.7` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Oct 2026 · Tags: Broken access control, CWE-706, CWE-829
- [JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints…](https://agentprime.io/advisories/CVE-2026-100256.md)
  `CVE-2026-100256` · CVE record: JetBrains IntelliJ IDEA · CVSS 7.8 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-829
- [baserCMS Users Community BcAddonMigrator: When converting baserCMS4-style addons to baserCMS5-style ones…](https://agentprime.io/advisories/CVE-2026-97150.md)
  `CVE-2026-97150` · CVE record: baserCMS Users Community BcAddonMigrator · CVSS 8.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-829
- [Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-86131.md)
  `CVE-2026-86131` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection, Weak cryptography or TLS, CWE-829
- [Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo](https://agentprime.io/advisories/CVE-2026-87114.md)
  `CVE-2026-87114` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.19 and 4 more · CVSS 7.1 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-829
- [Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN](https://agentprime.io/advisories/CVE-2026-54160.md)
  `CVE-2026-54160` · CVE record: networkupstools nut · CVSS 8.2 High · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-829
- [Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces](https://agentprime.io/advisories/CVE-2026-95985.md)
  `CVE-2026-95985` · CVE record: Amazon Kiro IDE · CVSS 8.6 High · Not analysed yet · Published 24 Sept 2026 · Tags: CWE-349, CWE-829
- [Apache Doris: JDBC driver URL validation bypass leads to remote code execution](https://agentprime.io/advisories/CVE-2026-96443.md)
  `CVE-2026-96443` · CVE record: Apache Software Foundation Apache Doris · CVSS 6.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: CWE-829
- [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-17647.md)
  `CVE-2026-17647` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 8.8 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-829
- [GNU Emacs: GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file…](https://agentprime.io/advisories/CVE-2026-96269.md)
  `CVE-2026-96269` · CVE record: GNU Emacs · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-829
- [Joplin: KaTeX \`trust:true\` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows](https://agentprime.io/advisories/CVE-2026-49449.md)
  `CVE-2026-49449` · CVE record: laurent22 joplin · CVSS 2.5 Low · Not analysed yet · Published 21 Sept 2026 · Tags: Information disclosure, Hard-coded credentials, CWE-829

Older: <https://agentprime.io/advisories/tag/cwe-829.md?cursor=WyIyMDI2LTA5LTIxVDIwOjUyOjExLjE2NDAwMFoiLCJDVkUtMjAyNi00OTQ0OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-829>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-829/>. Everything for agents: <https://agentprime.io/llms.txt>.