# CWE-829. Every Advisory and CVE whose sources give the weakness CWE-829, newest first. ## Records, newest first (an older page) - [PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client](https://agentprime.io/advisories/CVE-2025-8714.md) `CVE-2025-8714` · CVE record: PostgreSQL · CVSS 8.8 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-829 - [Cursor Agent is vulnerable to prompt injection via MCP Special Files](https://agentprime.io/advisories/CVE-2025-54135.md) `CVE-2025-54135` · CVE record: cursor cursor · CVSS 8.6 High · Not analysed yet · Published 5 Aug 2025 · Tags: Command injection, CWE-829 - [SimpleHelp Inclusion of functionality from untrusted control sphere](https://agentprime.io/advisories/CVE-2025-36727.md) `CVE-2025-36727` · CVE record: Simplehelp Simplehelp · CVSS 8.3 High · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-829 - [OpenAI Codex CLI: OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the…](https://agentprime.io/advisories/CVE-2025-54558.md) `CVE-2025-54558` · CVE record: OpenAI Codex CLI · CVSS 4.1 Medium · Not analysed yet · Published 25 Jul 2025 · Tags: CWE-829 - [One Identity Password Manager: The Secure Password extension in One Identity Password Manager before 5.14.4 allows local…](https://agentprime.io/advisories/CVE-2025-27582.md) `CVE-2025-27582` · CVE record: One Identity Password Manager · CVSS 7.6 High · Not analysed yet · Published 14 Jul 2025 · Tags: CWE-829 - [Folo allows secrets exfiltration via \`pull_request_target\`](https://agentprime.io/advisories/CVE-2025-53546.md) `CVE-2025-53546` · CVE record: RSSNext Folo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-829 - [mtr: mtr through 0.95, in certain privileged contexts…](https://agentprime.io/advisories/CVE-2025-49809.md) `CVE-2025-49809` · CVE record: mtr mtr · CVSS 7.8 High · Not analysed yet · Published 4 Jul 2025 · Tags: CWE-829 - [Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write](https://agentprime.io/advisories/CVE-2025-34074.md) `CVE-2025-34074` · CVE record: Lucee Association Switzerland Lucee · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2025 · Tags: Code injection, CWE-829 - [Monero Forum Remote Code Execution via Arbitrary File Read and Cookie Forgery](https://agentprime.io/advisories/CVE-2025-34060.md) `CVE-2025-34060` · CVE record: Monero Project Forum · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2025 · Tags: Insecure deserialization, CWE-20, CWE-829 - [Sudo: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf…](https://agentprime.io/advisories/CVE-2025-32463.md) `CVE-2025-32463` · CVE record: Sudo project Sudo · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.56 · Not analysed yet · Published 30 Jun 2025 · Tags: CWE-829 - [@nx/azure-cache Vulnerable to Build Cache Poisoning via Untrusted Pull Requests](https://agentprime.io/advisories/GHSA-rrr2-jcr8-7q3x.md) `GHSA-rrr2-jcr8-7q3x`, `CVE-2025-36852` · npm `@nx/azure-cache`: affected `<=4.0.0`, no fixed version yet · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-829 - [Elastic Agent Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/CVE-2024-52976.md) `CVE-2024-52976` · CVE record: Elastic Elastic Agent · CVSS 4.4 Medium · Not analysed yet · Published 1 May 2025 · Tags: CWE-829 - [Cisco Webex App Client-Side Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-20236.md) `CVE-2025-20236` · CVE record: Cisco Cisco Webex Teams · CVSS 8.8 High · Not analysed yet · Published 16 Apr 2025 · Tags: CWE-829 - [Privilege escalation in B&R APROL](https://agentprime.io/advisories/CVE-2024-45482.md) `CVE-2024-45482` · CVE record: B&R Industrial Automation B&R APROL · CVSS 8.5 High · Not analysed yet · Published 25 Mar 2025 · Tags: CWE-829 - [Kedro allows Remote Code Execution by Pulling Micro Packages](https://agentprime.io/advisories/GHSA-rm69-wvpv-r2w7.md) `GHSA-rm69-wvpv-r2w7`, `CVE-2024-12215`, `PYSEC-2026-1485` · PyPI `kedro`: affected `<=0.19.8`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: Code injection, CWE-20, CWE-829 - [Python JSON Logger has a Potential RCE via missing \`msgspec-python313-pre\` dependency](https://agentprime.io/advisories/CVE-2025-27607.md) `CVE-2025-27607` · CVE record: nhairs python-json-logger · CVSS 8.8 High · Not analysed yet · Published 7 Mar 2025 · Tags: CWE-829 - [Remote Code Execution within Collabora Online jail with Macros Enabled](https://agentprime.io/advisories/CVE-2025-24796.md) `CVE-2025-24796` · CVE record: CollaboraOnline online · CVSS 6.3 Medium · Not analysed yet · Published 6 Mar 2025 · Tags: CWE-829 - [Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Arbitrary Content Inclusion via Iframe OVE-20230524-0012.](https://agentprime.io/advisories/CVE-2025-27668.md) `CVE-2025-27668` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-829 - [RCE in the package conda-forge-metadata](https://agentprime.io/advisories/CVE-2025-27510.md) `CVE-2025-27510` · CVE record: conda-forge conda-forge-metadata · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-829 - [Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)](https://agentprime.io/advisories/CVE-2025-0982.md) `CVE-2025-0982` · CVE record: Google Cloud Application Integration · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-829 - [An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1.](https://agentprime.io/advisories/CVE-2024-54663.md) `CVE-2024-54663` · CVE record · CVSS 7.5 High · Not analysed yet · Published 19 Dec 2024 · Tags: CWE-829 - [The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privile…](https://agentprime.io/advisories/CVE-2024-48336.md) `CVE-2024-48336` · CVE record · CVSS 8.4 High · Not analysed yet · Published 4 Nov 2024 · Tags: CWE-829 - [Windows Hyper-V Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-30092.md) `CVE-2024-30092` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 8.0 High · Not analysed yet · Published 8 Oct 2024 · Tags: CWE-20, CWE-829 - [Synology Drive Client: Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL…](https://agentprime.io/advisories/CVE-2022-49038.md) `CVE-2022-49038` · CVE record: Synology Synology Drive Client · CVSS 7.8 High · Not analysed yet · Published 26 Sept 2024 · Tags: CWE-829 - [The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function.](https://agentprime.io/advisories/CVE-2024-45416.md) `CVE-2024-45416` · CVE record · CVSS 8.1 High · Not analysed yet · Published 16 Sept 2024 · Tags: CWE-829 - [Gallagher Command Centre Server: Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre…](https://agentprime.io/advisories/CVE-2024-43690.md) `CVE-2024-43690` · CVE record: Gallagher Command Centre Server · CVSS 8.0 High · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-829 - [Anki Latex Incomplete Blocklist Vulnerability](https://agentprime.io/advisories/GHSA-x3r6-ccvq-cf5v.md) `GHSA-x3r6-ccvq-cf5v`, `CVE-2024-29073`, `PYSEC-2026-1118` · PyPI `anki`: affected `<24.6`, fixed in `24.6` · CVSS 5.3 Medium · EPSS 0.12 · Not analysed yet · Published 22 Jul 2024 · Tags: CWE-829 - [Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js](https://agentprime.io/advisories/GHSA-cvw4-c69g-7v7m.md) `GHSA-cvw4-c69g-7v7m`, `CVE-2024-38537`, `PYSEC-2026-1339` · PyPI `ethyca-fides`: affected `<2.39.1`, fixed in `2.39.1` · CVSS 0.0 None · Not analysed yet · Published 2 Jul 2024 · Tags: CWE-829 - [Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect](https://agentprime.io/advisories/CVE-2024-38476.md) `CVE-2024-38476` · CVE record: Apache Software Foundation Apache HTTP Server · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.42 · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-829 - [Zigbee co-ordinator realignment packet may lead to denial of service](https://agentprime.io/advisories/CVE-2024-3043.md) `CVE-2024-3043` · CVE record: silabs.com Ember ZNet SDK · CVSS 7.5 High · Not analysed yet · Published 27 Jun 2024 · Tags: CWE-829 - [Mozilla Firefox: Offscreen Canvas did not properly track cross-origin tainting…](https://agentprime.io/advisories/CVE-2024-5693.md) `CVE-2024-5693` · CVE record: Mozilla Firefox and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 11 Jun 2024 · Tags: CWE-829 - [Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point…: A command execution vulnerability exists in the tddpd enable_test_mode functionality of…](https://agentprime.io/advisories/CVE-2023-49134.md) `CVE-2023-49134` · CVE record: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) and 1 more · CVSS 8.1 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-829 - [Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point…: A command execution vulnerability exists in the tddpd enable_test_mode functionality of…](https://agentprime.io/advisories/CVE-2023-49133.md) `CVE-2023-49133` · CVE record: Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) and 1 more · CVSS 8.1 High · Not analysed yet · Published 9 Apr 2024 · Tags: CWE-829 - [WeasyPrint allows the attachment of arbitrary files and URLs to a PDF](https://agentprime.io/advisories/GHSA-35jj-wx47-4w8r.md) `GHSA-35jj-wx47-4w8r`, `CVE-2024-28184`, `PYSEC-2026-2033` · PyPI `weasyprint`: affected `>=61.0, <61.2`, fixed in `61.2` · CVSS 7.4 High · Not analysed yet · Published 8 Mar 2024 · Tags: CWE-829 - [Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php](https://agentprime.io/advisories/GHSA-7c6p-848j-wh5h.md) `GHSA-7c6p-848j-wh5h`, `BIT-composer-2024-24821`, `CVE-2024-24821`, `PKSA-jn72-4kr8-gj3h` · Packagist `composer/composer`: affected `>=2.0.0-alpha1, <2.2.23 || >=2.3.0-rc1, <2.7.0`, fixed in `2.2.23`, `2.7.0` · CVSS 8.8 High · Not analysed yet · Published 8 Feb 2024 · Tags: CWE-829 - [Breaking unlinkability in Identity Mixer using malicious keys](https://agentprime.io/advisories/GHSA-2q6j-gqc4-4gw3.md) `GHSA-2q6j-gqc4-4gw3`, `CVE-2022-31021` · crates.io `anoncreds-clsignatures` and 1 more: affected `*`, no fixed version yet · CVSS 3.3 Low · Not analysed yet · Published 16 Jan 2024 · Tags: CWE-829 - [Ray has arbitrary code execution via jobs submission API](https://agentprime.io/advisories/GHSA-6wgj-66m2-xxp2.md) `GHSA-6wgj-66m2-xxp2`, `CVE-2023-48022`, `PYSEC-2026-517` · PyPI `ray`: affected `<=2.49.2`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.84 · Not analysed yet · Published 28 Nov 2023 · Tags: Server-side request forgery (SSRF), CWE-829 - [Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack](https://agentprime.io/advisories/CVE-2023-4591.md) `CVE-2023-4591` · CVE record: WPN-XM Serverstack · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2023 · Tags: CWE-829 - [Yettiesoft VestCert Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2023-45798.md) `CVE-2023-45798` · CVE record: Yettiesoft VestCert · CVSS 8.4 High · Not analysed yet · Published 30 Oct 2023 · Tags: CWE-829 - [M-Files Web Companion allows Remote Code Execution](https://agentprime.io/advisories/CVE-2023-5523.md) `CVE-2023-5523` · CVE record: M-Files Web Companion · CVSS 8.6 High · Not analysed yet · Published 20 Oct 2023 · Tags: CWE-829 - [Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog](https://agentprime.io/advisories/CVE-2023-0625.md) `CVE-2023-0625` · CVE record: Docker Inc. Docker Desktop · CVSS 8.0 High · Not analysed yet · Published 25 Sept 2023 · Tags: Cross-site scripting (XSS), Code injection, CWE-829 - [Apache HDFS Provider error message suggested](https://agentprime.io/advisories/GHSA-5hj9-m76g-xrc8.md) `GHSA-5hj9-m76g-xrc8`, `CVE-2023-41267`, `PYSEC-2026-1138` · PyPI `apache-airflow-providers-apache-hdfs`: affected `<4.1.1`, fixed in `4.1.1` · CVSS 7.8 High · Not analysed yet · Published 14 Sept 2023 · Tags: CWE-829 - [Local file Inclusion (LFI) in Forum Infusion via Directory Traversal](https://agentprime.io/advisories/CVE-2023-2453.md) `CVE-2023-2453` · CVE record: PHPFusion PHPFusion · CVSS 8.8 High · Not analysed yet · Published 5 Sept 2023 · Tags: CWE-829 - [Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/CVE-2023-31170.md) `CVE-2023-31170` · CVE record: Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software · CVSS 5.9 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-829 - [Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/CVE-2023-31168.md) `CVE-2023-31168` · CVE record: Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software · CVSS 5.5 Medium · Not analysed yet · Published 31 Aug 2023 · Tags: CWE-829 - [Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.](https://agentprime.io/advisories/GHSA-8q28-pw9g-w82c.md) `GHSA-8q28-pw9g-w82c`, `CVE-2023-40195`, `PYSEC-2023-156` · PyPI `apache-airflow-providers-apache-spark`: affected `<4.1.3`, fixed in `4.1.3` · CVSS 8.8 High · Not analysed yet · Published 28 Aug 2023 · Tags: Insecure deserialization, CWE-829 - [The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts.](https://agentprime.io/advisories/CVE-2023-36609.md) `CVE-2023-36609` · CVE record: Ovarro TBox MS-CPU32 and 4 more · CVSS 7.2 High · Not analysed yet · Published 3 Jul 2023 · Tags: CWE-829 - [Remote Code Execution with Root Privileges via Broad Apache Permissions](https://agentprime.io/advisories/CVE-2022-46302.md) `CVE-2022-46302` · CVE record: Tribe29 Checkmk · CVSS 8.8 High · Not analysed yet · Published 20 Apr 2023 · Tags: CWE-829 - [A flaw was found in openstack-glance. This issue could allow a remote, authenticated attacker to tamper with images, compromising the integrity of virtual machines created using these modified images.](https://agentprime.io/advisories/GHSA-5gp5-vxj6-4257.md) `GHSA-5gp5-vxj6-4257`, `CVE-2022-4134`, `PYSEC-2023-270` · PyPI `glance`: affected `<=25.1.0`, no fixed version yet · CVSS 2.8 Low · Not analysed yet · Published 6 Mar 2023 · Tags: CWE-829 - [Gradle usage of long IDs for PGP keys opens potential for collision attacks](https://agentprime.io/advisories/CVE-2023-26053.md) `CVE-2023-26053` · CVE record: gradle gradle · CVSS 6.6 Medium · Not analysed yet · Published 2 Mar 2023 · Tags: CWE-829 - [Cloudflow - Local File Inclusion Vulnerability](https://agentprime.io/advisories/CVE-2022-41216.md) `CVE-2022-41216` · CVE record: Hybrid Software Cloudflow · CVSS 8.3 High · Not analysed yet · Published 22 Feb 2023 · Tags: CWE-829 - [Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell.](https://agentprime.io/advisories/CVE-2022-24119.md) `CVE-2022-24119` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Dec 2022 · Tags: CWE-829 - [Mozilla Firefox: An iframe that was not permitted to run scripts could do so if the user clicked on a…](https://agentprime.io/advisories/CVE-2022-34468.md) `CVE-2022-34468` · CVE record: Mozilla Firefox and 2 more · CVSS 8.8 High · Not analysed yet · Published 22 Dec 2022 · Tags: CWE-829 - [Markdownify subject to Remote Code Execution via malicious markdown file](https://agentprime.io/advisories/GHSA-c942-mfmp-p4fh.md) `GHSA-c942-mfmp-p4fh`, `CVE-2022-41709` · npm `electron-markdownify`: affected `<=1.4.1`, no fixed version yet · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-829 - [Junos OS: PHP file inclusion vulnerability in J-Web](https://agentprime.io/advisories/CVE-2022-22246.md) `CVE-2022-22246` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-829 - [Mitsubishi Electric GENESIS64: Inclusion of Functionality from Untrusted Control Sphere vulnerability in Mitsubishi…](https://agentprime.io/advisories/CVE-2022-33317.md) `CVE-2022-33317` · CVE record: Mitsubishi Electric GENESIS64 and 4 more · CVSS 7.8 High · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-829 - [Gradle's dependency verification can ignore checksum verification when signature verification cannot be performed](https://agentprime.io/advisories/CVE-2022-31156.md) `CVE-2022-31156` · CVE record: gradle gradle · CVSS 6.6 Medium · Not analysed yet · Published 14 Jul 2022 · Tags: CWE-829 - [In Eclipse p2, installable units are able to alter the Eclipse Platform installation and the local machine via touchpoints during installation.](https://agentprime.io/advisories/CVE-2021-41037.md) `CVE-2021-41037` · CVE record: The Eclipse Foundation Eclipse Equinox p2 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2022 · Tags: CWE-829 - [Duplicate Advisory: Embedded malware in ua-parser-js](https://agentprime.io/advisories/GHSA-236c-vhj4-gfxg.md) `GHSA-236c-vhj4-gfxg` · npm `ua-parser-js`: affected `>=0.7.29, <0.7.30 || >=0.8.0, <0.8.1 || >=1.0.0, <1.0.1`, fixed in `0.7.30`, `0.8.1`, `1.0.1` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 25 May 2022 · Tags: CWE-829, CWE-912 - [Magento remote code execution vulnerability](https://agentprime.io/advisories/GHSA-4v2q-hjx3-c4vr.md) `GHSA-4v2q-hjx3-c4vr`, `CVE-2019-8154`, `PKSA-bm6c-1d7t-rxwt`, `PKSA-n6w4-nyrd-3d71` · Packagist `magento/community-edition`: affected `>=2.2.0, <2.2.10 || >=2.3.0, <2.3.2-p2`, fixed in `2.2.10`, `2.3.2-p2` · CVSS 8.8 High · Not analysed yet · Published 24 May 2022 · Tags: CWE-829 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .