# CWE-829.

Every Advisory and CVE whose sources give the weakness CWE-829, newest first.

## Records, newest first (an older page)

- [Cortex has Untrusted Project Bootstrap Code Execution via \`CLAUDE_PROJECT_DIR\`](https://agentprime.io/advisories/GHSA-gvpp-v77h-5w8g.md)
  `GHSA-gvpp-v77h-5w8g`, `CVE-2026-49986`, `PYSEC-2026-2676` · PyPI `neuro-cortex-memory`: affected `<3.18.0`, fixed in `3.18.0` · CVSS 7.1 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-829
- [LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path](https://agentprime.io/advisories/CVE-2026-58116.md)
  `CVE-2026-58116` · CVE record: hiyouga LlamaFactory · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Code injection, CWE-829
- [Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load](https://agentprime.io/advisories/CVE-2026-13751.md)
  `CVE-2026-13751` · CVE record: Snowflake Snowflake CLI · CVSS 4.1 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-829
- [PraisonAI MCP \`tools/call\` path-traversal => RCE via Python \`.pth\` injection](https://agentprime.io/advisories/GHSA-9mqq-jqxf-grvw.md)
  `GHSA-9mqq-jqxf-grvw`, `CVE-2026-44336`, `PYSEC-2026-472` · PyPI `praisonai`: affected `<4.6.34`, fixed in `4.6.34` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Path traversal, Code injection, CWE-20, CWE-829
- [PraisonAI Vulnerable Untrusted Remote Template Code Execution](https://agentprime.io/advisories/GHSA-pv9q-275h-rh7x.md)
  `GHSA-pv9q-275h-rh7x`, `CVE-2026-40154`, `PYSEC-2026-476` · PyPI `praisonai`: affected `<4.5.128`, fixed in `4.5.128` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: CWE-829
- [pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes](https://agentprime.io/advisories/GHSA-w466-c33r-3gjp.md)
  `GHSA-w466-c33r-3gjp`, `CVE-2026-55698` · npm `pnpm`: affected `<10.34.2 || >=11.0.0, <11.5.3`, fixed in `10.34.2`, `11.5.3` · CVSS 8.8 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-345, CWE-494, CWE-829
- [pnpm: Repository-controlled configDependencies can select a pacquet native install engine](https://agentprime.io/advisories/GHSA-gj8w-mvpf-x27x.md)
  `GHSA-gj8w-mvpf-x27x`, `CVE-2026-55697` · npm `pnpm`: affected `<10.34.2 || >=11.0.0, <11.5.3`, fixed in `10.34.2`, `11.5.3` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Command injection, CWE-494, CWE-829
- [pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle](https://agentprime.io/advisories/GHSA-5wx6-mg75-v57r.md)
  `GHSA-5wx6-mg75-v57r`, `CVE-2026-55487` · npm `pnpm`: affected `<10.34.2 || >=11.0.0, <11.5.3`, fixed in `10.34.2`, `11.5.3` · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-346, CWE-693, CWE-829
- [MISP remote code execution via arbitrary rdkafka configuration path](https://agentprime.io/advisories/CVE-2026-56447.md)
  `CVE-2026-56447` · CVE record: misp misp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-829
- [containerd: CRI checkpoint import allows local image tag poisoning](https://agentprime.io/advisories/GHSA-cvxm-645q-p574.md)
  `GHSA-cvxm-645q-p574`, `CVE-2026-50195`, `GO-2026-5338` · Go `github.com/containerd/containerd/v2`: affected `>=2.1.0, <2.1.9 || >=2.2.0, <2.2.5 || >=2.3.0, <2.3.2`, fixed in `2.1.9`, `2.2.5`, `2.3.2` · CVSS 5.6 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: CWE-345, CWE-829
- [\[Eclipse Theia\] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat](https://agentprime.io/advisories/GHSA-m973-pr9r-hp2w.md)
  `GHSA-m973-pr9r-hp2w`, `CVE-2026-46580` · npm `@theia/ai-chat` and 5 more: affected `<1.71.0`, fixed in `1.71.0` · CVSS 8.4 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-829, CWE-1427
- [\[Eclipse Theia\] Arbitrary Command Execution via Untrusted Workspace Task Definitions](https://agentprime.io/advisories/GHSA-g9jw-92q7-g7fj.md)
  `GHSA-g9jw-92q7-g7fj`, `CVE-2026-44691` · npm `@theia/debug` and 2 more: affected `<1.69.0`, fixed in `1.69.0` · CVSS 8.4 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-829
- [\[Eclipse Theia\] Data Exfiltration via Markdown Image Rendering in AI Chat](https://agentprime.io/advisories/GHSA-qwjm-9c66-w4q4.md)
  `GHSA-qwjm-9c66-w4q4`, `CVE-2026-22551` · npm `@theia/ai-chat` and 6 more: affected `<1.71.0`, fixed in `1.71.0` · CVSS 6.7 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Information disclosure, CWE-829
- [\[Eclipse Theia\] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat](https://agentprime.io/advisories/GHSA-3jww-hxqj-wfq2.md)
  `GHSA-3jww-hxqj-wfq2`, `CVE-2026-44688` · npm `@theia/ai-chat` and 6 more: affected `<1.71.0`, fixed in `1.71.0` · CVSS 8.4 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-829, CWE-1427
- [Dell PowerFlex: Dell PowerFlex Manager, version(s) prior to 5.1.0.1…](https://agentprime.io/advisories/CVE-2026-22283.md)
  `CVE-2026-22283` · CVE record: Dell PowerFlex · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-829
- [Pi Agent: Pi loads project-local extensions without approval](https://agentprime.io/advisories/GHSA-mqxh-6gq7-558m.md)
  `GHSA-mqxh-6gq7-558m`, `CVE-2026-54325` · npm `@earendil-works/pi-coding-agent`: affected `<0.79.0`, fixed in `0.79.0` · CVSS 4.4 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-829
- [Cursor Desktop sandbox escape via Claude hook configuration](https://agentprime.io/advisories/CVE-2026-48124.md)
  `CVE-2026-48124` · CVE record: cursor cursor · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, CWE-829
- [DoS + Remote Code Execution via PDF JavaScript in Foxit AI](https://agentprime.io/advisories/CVE-2026-12057.md)
  `CVE-2026-12057` · CVE record: Foxit Software Inc. Foxit AI · CVSS 8.6 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-829
- [Duck Site: Untrusted pull request code can trigger privileged production deployment](https://agentprime.io/advisories/CVE-2026-47174.md)
  `CVE-2026-47174` · CVE record: duck-organization duck-site · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-829
- [Vim: Arbitrary Code Execution via Python Omni-Completion](https://agentprime.io/advisories/CVE-2026-52858.md)
  `CVE-2026-52858` · CVE record: vim vim · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection, CWE-829
- [Quest Bot: Untrusted pull request code can be built and deployed by privileged \`workflow_run\` deployment.](https://agentprime.io/advisories/CVE-2026-47172.md)
  `CVE-2026-47172` · CVE record: duck-organization quest-bot · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-829
- [PDM: Project-Controlled \`.pdm-plugins\` Content Executes Before CLI Parsing](https://agentprime.io/advisories/GHSA-qq6c-99pv-prvf.md)
  `GHSA-qq6c-99pv-prvf`, `CVE-2026-47781`, `PYSEC-2026-2863` · PyPI `pdm`: affected `<2.27.0`, fixed in `2.27.0` · CVSS 8.4 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection, CWE-829
- [PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen](https://agentprime.io/advisories/CVE-2026-46529.md)
  `CVE-2026-46529` · CVE record: mate-desktop atril · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection, CWE-829
- [Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47292.md)
  `CVE-2026-47292` · CVE record: Microsoft Visual Studio Code - MSSQL Extension · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection, CWE-829
- [Google Chrome: Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53…](https://agentprime.io/advisories/CVE-2026-11269.md)
  `CVE-2026-11269` · CVE record: Google Chrome · CVSS 7.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-829
- [CVE-2026-8879](https://agentprime.io/advisories/CVE-2026-8879.md)
  `CVE-2026-8879` · CVE record: Securly Securly Chrome Extension · CVSS 7.5 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-829
- [huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path](https://agentprime.io/advisories/GHSA-fgcw-684q-jj6r.md)
  `GHSA-fgcw-684q-jj6r`, `CVE-2026-5241`, `PYSEC-2026-2290` · PyPI `transformers`: affected `<5.5.0`, fixed in `5.5.0` · CVSS 8.0 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-829
- [Synology Active Backup for Business Recovery Media Creator: An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL…](https://agentprime.io/advisories/CVE-2022-49036.md)
  `CVE-2022-49036` · CVE record: Synology Synology Active Backup for Business Recovery Media Creator · CVSS 7.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-829
- [Synology Hyper Backup Explorer: An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL…](https://agentprime.io/advisories/CVE-2022-49042.md)
  `CVE-2022-49042` · CVE record: Synology Synology Hyper Backup Explorer · CVSS 7.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-829
- [PraisonAI: Arbitrary code execution via unguarded \`spec.loader.exec_module\` in \`agents_generator.py\` - sibling of CVE-2026-44334](https://agentprime.io/advisories/GHSA-78r8-wwqv-r299.md)
  `GHSA-78r8-wwqv-r299`, `CVE-2026-47398`, `CVE-2026-64824`, `PYSEC-2026-2905` · PyPI `praisonai`: affected `<4.6.40`, fixed in `4.6.40` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: Path traversal, Code injection, CWE-829
- [Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint](https://agentprime.io/advisories/CVE-2026-44358.md)
  `CVE-2026-44358` · CVE record: espressif shared-github-dangerjs · CVSS 8.2 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-427, CWE-829
- [yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation](https://agentprime.io/advisories/GHSA-vv9j-gjw2-j8wp.md)
  `GHSA-vv9j-gjw2-j8wp`, `CVE-2026-42089` · npm `yeoman-environment`: affected `>=2.9.0, <6.0.1`, fixed in `6.0.1` · CVSS 8.6 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-829
- [Docker Model Runner container-to-host code execution via MLX-LM model_file importlib loading](https://agentprime.io/advisories/CVE-2026-5843.md)
  `CVE-2026-5843` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 22 May 2026 · Tags: CWE-829
- [Docker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends](https://agentprime.io/advisories/CVE-2026-5817.md)
  `CVE-2026-5817` · CVE record: Docker Docker Desktop · CVSS 8.8 High · Not analysed yet · Published 22 May 2026 · Tags: CWE-829
- [Concrete CMS is Vulnerable to Cross-Site Request Forgery](https://agentprime.io/advisories/GHSA-prxr-vjgc-2cq9.md)
  `GHSA-prxr-vjgc-2cq9`, `CVE-2026-8428`, `PKSA-fqsc-qq8z-j29z` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF), CWE-829
- [Concrete CMS does not validate a CSRF token before processing requests to \`/dashboard/extend/update/prepare_remote_upgrade/\<remoteMPID>\`](https://agentprime.io/advisories/GHSA-5rj5-gfmr-hrc3.md)
  `GHSA-5rj5-gfmr-hrc3`, `CVE-2026-8426`, `PKSA-61mc-443r-dbcf` · Packagist `concrete5/concrete5`: affected `<9.5.1`, fixed in `9.5.1` · CVSS 7.5 High · Not analysed yet · Published 21 May 2026 · Tags: Cross-site request forgery (CSRF), CWE-829
- [Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs](https://agentprime.io/advisories/GHSA-qx5x-85p8-vg4j.md)
  `GHSA-qx5x-85p8-vg4j`, `CVE-2026-45711`, `GO-2026-5599` · Go `github.com/axllent/mailpit`: affected `<1.30.0`, fixed in `1.30.0` · CVSS 5.9 Medium · Not analysed yet · Published 19 May 2026 · Tags: Path traversal, CWE-829
- [Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading](https://agentprime.io/advisories/CVE-2026-7373.md)
  `CVE-2026-7373` · CVE record: Rapid7 Metasploit Pro · CVSS 8.5 High · Not analysed yet · Published 15 May 2026 · Tags: Broken access control, CWE-427, CWE-829
- [Duplicate Advisory: OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config](https://agentprime.io/advisories/GHSA-p3m6-jr2h-hhxj.md)
  `GHSA-p3m6-jr2h-hhxj` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 7.3 High · Withdrawn · Not analysed yet · Published 11 May 2026 · Tags: CWE-829
- [Kdenlive: Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled…](https://agentprime.io/advisories/CVE-2026-45184.md)
  `CVE-2026-45184` · CVE record: KDE Kdenlive · CVSS 6.5 Medium · Not analysed yet · Published 9 May 2026 · Tags: CWE-829
- [Electerm users can run dangrous code through link or command line](https://agentprime.io/advisories/GHSA-mpm8-cx2p-626q.md)
  `GHSA-mpm8-cx2p-626q`, `CVE-2026-43944` · npm `electerm`: affected `>=3.0.6, <3.8.8`, fixed in `3.8.8` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection, CWE-20, CWE-829
- [Electerm runWidget has a path traversal that leads to arbitrary code execution](https://agentprime.io/advisories/GHSA-f77v-9vpc-6pjm.md)
  `GHSA-f77v-9vpc-6pjm`, `CVE-2026-43940` · npm `electerm`: affected `<3.7.16`, fixed in `3.7.16` · CVSS 8.4 High · Not analysed yet · Published 8 May 2026 · Tags: Path traversal, CWE-829
- [vm2 has a NodeVM builtin allowlist bypass via \`module\` builtin's \`Module.\_load\` that allows sandbox escape](https://agentprime.io/advisories/GHSA-947f-4v7f-x2v8.md)
  `GHSA-947f-4v7f-x2v8`, `CVE-2026-43999` · npm `vm2`: affected `>=3.10.5, <3.11.0`, fixed in `3.11.0` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Broken access control, CWE-829
- [CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content](https://agentprime.io/advisories/GHSA-ff6c-w6qf-7xqc.md)
  `GHSA-ff6c-w6qf-7xqc`, `CVE-2026-44312` · RubyGems `css_parser`: affected `<1.22.0 || >=2.0.0, <2.1.0`, fixed in `1.22.0`, `2.1.0` · CVSS 5.8 Medium · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS, CWE-829
- [Compromise of PyTorch Lightning PyPi Package Versions](https://agentprime.io/advisories/GHSA-w37p-236h-pfx3.md)
  `GHSA-w37p-236h-pfx3`, `CVE-2026-44484`, `PYSEC-2026-3973`, `PYSEC-2026-508` · PyPI `pytorch-lightning`: affected `=2.6.2 || =2.6.3`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: CWE-506, CWE-829
- [OpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/GHSA-rmxr-45gj-889w.md)
  `GHSA-rmxr-45gj-889w`, `CVE-2026-43003`, `PYSEC-2026-205` · PyPI `ironic-python-agent`: affected `>=1.0.0, <11.6.0`, fixed in `11.6.0` · CVSS 8.0 High · Not analysed yet · Published 1 May 2026 · Tags: Command injection, CWE-829
- [OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/GHSA-wqpv-c3pp-3m58.md)
  `GHSA-wqpv-c3pp-3m58`, `CVE-2026-42510`, `PYSEC-2026-2525` · PyPI `ironic`: affected `<35.0.1`, fixed in `35.0.1` · CVSS 6.6 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: CWE-829
- [pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/GHSA-jp4c-xjxw-mgf9.md)
  `GHSA-jp4c-xjxw-mgf9`, `CVE-2026-6357`, `PYSEC-2026-2876` · PyPI `pip`: affected `<26.1`, fixed in `26.1` · CVSS 5.3 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: CWE-829
- [OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config](https://agentprime.io/advisories/GHSA-mj59-h3q9-ghfh.md)
  `GHSA-mj59-h3q9-ghfh`, `CVE-2026-44995` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 5.4 Medium · Not analysed yet · Published 25 Apr 2026 · Tags: CWE-427, CWE-454, CWE-829
- [Duplicate Advisory: OpenClaw: OpenShell \`mirror\` mode can convert untrusted sandbox files into explicitly enabled workspace hooks and execute them on the host during gateway startup](https://agentprime.io/advisories/GHSA-m563-373q-885c.md)
  `GHSA-m563-373q-885c` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 7.3 High · Withdrawn · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-829
- [Duplicate Advisory: OpenClaw: Workspace \`.env\` can override the bundled hooks root and load attacker hook code](https://agentprime.io/advisories/GHSA-jx3c-247h-cxwp.md)
  `GHSA-jx3c-247h-cxwp` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 24 Apr 2026 · Tags: CWE-829
- [InstructLab Includes Functionality from Untrusted Control Sphere](https://agentprime.io/advisories/GHSA-rxpq-xgqx-fr7p.md)
  `GHSA-rxpq-xgqx-fr7p`, `CVE-2026-6859`, `PYSEC-2026-2522` · PyPI `instructlab`: affected `<=0.26.1`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-829
- [Goshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistence](https://agentprime.io/advisories/CVE-2026-40903.md)
  `CVE-2026-40903` · CVE record: patrickhener goshs · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Apr 2026 · Tags: CWE-829
- [iTerm2: In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p…](https://agentprime.io/advisories/CVE-2026-41253.md)
  `CVE-2026-41253` · CVE record: iTerm2 iTerm2 · CVSS 6.9 Medium · Not analysed yet · Published 18 Apr 2026 · Tags: CWE-829
- [OpenClaw: Workspace provider auth choices could auto-enable untrusted provider plugins](https://agentprime.io/advisories/GHSA-939r-rj45-g2rj.md)
  `GHSA-939r-rj45-g2rj`, `CVE-2026-43569` · npm `openclaw`: affected `<2026.4.9`, fixed in `2026.4.9` · CVSS 7.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-829
- [OpenClaw: Channel setup catalog lookups could include untrusted workspace plugin shadows](https://agentprime.io/advisories/GHSA-82qx-6vj7-p8m2.md)
  `GHSA-82qx-6vj7-p8m2`, `CVE-2026-43571` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 7.7 High · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, CWE-829
- [Local Privilege Escalation via OpenSSL configuration file in Insight Agent](https://agentprime.io/advisories/CVE-2026-6482.md)
  `CVE-2026-6482` · CVE record: Rapid7 Insight Agent · CVSS 8.5 High · Not analysed yet · Published 17 Apr 2026 · Tags: CWE-829
- [Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.](https://agentprime.io/advisories/CVE-2026-40959.md)
  `CVE-2026-40959` · CVE record: Luanti Luanti · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Apr 2026 · Tags: CWE-829
- [PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence](https://agentprime.io/advisories/CVE-2026-40313.md)
  `CVE-2026-40313` · CVE record: MervinPraison PraisonAI · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2026 · Tags: CWE-829
- [PraisonAI Vulnerable to Implicit Execution of Arbitrary Code via Automatic \`tools.py\` Loading](https://agentprime.io/advisories/GHSA-2g3w-cpc4-chr4.md)
  `GHSA-2g3w-cpc4-chr4`, `CVE-2026-40156`, `PYSEC-2026-2895` · PyPI `praisonai`: affected `<4.5.128`, fixed in `4.5.128` · CVSS 7.8 High · Not analysed yet · Published 10 Apr 2026 · Tags: Code injection, CWE-426, CWE-829

Newest: <https://agentprime.io/advisories/tag/cwe-829.md>
Older: <https://agentprime.io/advisories/tag/cwe-829.md?cursor=WyIyMDI2LTA0LTEwVDE5OjI2OjQ0LjAwMDAwMFoiLCJHSFNBLTJnM3ctY3BjNC1jaHI0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-829&cursor=WyIyMDI2LTA3LTAyVDE2OjAwOjQyLjAwMDAwMFoiLCJHSFNBLXY2cjItamg1OC14eDZ3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-829/?cursor=WyIyMDI2LTA3LTAyVDE2OjAwOjQyLjAwMDAwMFoiLCJHSFNBLXY2cjItamg1OC14eDZ3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.