CWE-829.

Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

• mistralai mistral-vibe
• CWE-829

CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere

• CareCam HMT.CM2507 Firmware
• CWE-829

NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI

• netbox-community devicetype-library
• Server-side request forgery (SSRF)
• CWE-15

NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

• netbox-community devicetype-library
• CWE-427
• CWE-829

NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

• netbox-community devicetype-library
• Insecure deserialization
• CWE-829

Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration

• AWS Kiro IDE
• Information disclosure
• CWE-829

Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME

• Google Cloud Gemini CLI
• CWE-15
• CWE-829

Checkov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File

• Palo Alto Networks Checkov by Prisma Cloud
• CWE-829

functype-mcp-server: MCP `set_functype_version` Package Alias RCE via Unsanitized pnpm install + Dynamic Import

• CWE-829

<1.4.4 · fixed in 1.4.4

Joker linter executed project-local .jokerd/linter.* files during linting

• CWE-829

<1.8.2 · fixed in 1.8.2

mlflow: Code execution can occur in versions of the MLflow platform running version 0.0.1 or…

• mlflow
• CWE-829

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before…

• JetBrains IntelliJ IDEA
• CWE-829

Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

• axolotl
• CWE-829

Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing

• Exterro FTK Imager
• XML external entities (XXE)
• CWE-829

Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

• Path traversal
• Server-side request forgery (SSRF)

<8.22.0 · fixed in 8.22.0

Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.

• Dell PowerStore 500T
• Dell PowerStore 1000T
• CWE-829

Inclusion of Functionality from Untrusted Control Sphere in GitLab

• GitLab
• CWE-829

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

• Code injection
• CWE-426

>=3.9.26, <4.6.58 · fixed in 4.6.58

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

• Path traversal
• Information disclosure

<2.1.5 · fixed in 2.1.5

Acm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• CWE-829

Critical flaw impacting OZOLS ERP's automatic update channel

• OZOLS
• Weak cryptography or TLS
• CWE-494

MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

• PoxenStudio talebook
• Code injection
• CWE-829

Vim: Arbitrary Ex Command Execution in C Omni-Completion

• vim
• Code injection
• CWE-829

WordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability

• supsystic Easy Google Maps
• CWE-829

Eclipse Foundation Eclipse Theia: In Eclipse Theia versions up to and including 1.69.0…

• Eclipse Foundation Eclipse Theia
• CWE-15
• CWE-829

PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands

• PostgreSQL
• CWE-829

PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client

• PostgreSQL
• CWE-829

Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• CWE-829

Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability

• Server-side request forgery (SSRF)
• CWE-693

>=8.0.0, <8.0.30 || >=9.0.0, <9.0.19 || >=10.0.0, <10.0.11 · fixed in 8.0.30, 9.0.19, 10.0.11

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

• Microsoft Python extension for Visual Studio Code
• CWE-693
• CWE-829

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

• vim
• Code injection
• CWE-829

Openjdk-orb: unauthed class loading via iiop in eap

• Red Hat JBoss Enterprise Application Platform 7.4.25
• Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
• CWE-829

html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

• CWE-829

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

• mistralai mistral-vibe
• CWE-829

Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

• CJCOLLIER Google::Auth
• Command injection
• CWE-829

Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

• Path traversal
• CWE-829

<1.29.1 || >=1.30.0, <1.34.0 · fixed in 1.29.1, 1.34.0

Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`

• Code injection
• CWE-829

<1.29.1 || >=1.30.0, <1.32.5 · fixed in 1.29.1, 1.32.5

Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF

• Path traversal
• Server-side request forgery (SSRF)

<1.29.1 || >=1.30.0, <1.32.5 · fixed in 1.29.1, 1.32.5

Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

• Path traversal
• Server-side request forgery (SSRF)

<1.29.1 || >=1.30.0, <1.32.5 · fixed in 1.29.1, 1.32.5

Microsoft Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions

• Path traversal
• CWE-829

<1.29.1 || >=1.30.0, <1.32.5 · fixed in 1.29.1, 1.32.5

Exim: Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe…

• Exim
• CWE-829

JetBrains PyCharm: In JetBrains PyCharm before 2026.1.4…

• JetBrains PyCharm
• CWE-829

JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before…

• JetBrains IntelliJ IDEA
• CWE-829

JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…

• JetBrains PhpStorm
• CWE-829

JetBrains PhpStorm: In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting…

• JetBrains PhpStorm
• CWE-829

JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a…

• JetBrains WebStorm
• CWE-829

JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

• JetBrains WebStorm
• CWE-829

JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

• JetBrains WebStorm
• CWE-829

JetBrains WebStorm: In JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting…

• JetBrains WebStorm
• CWE-829

Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

• meshtastic firmware
• Code injection
• CWE-829

Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere

• Sipeed PicoClaw
• CWE-829

ForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository

• tailcallhq forgecode
• CWE-829

OpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode

• OpenClaw
• CWE-829

Cherry Studio RCE via SearchService nodeIntegration Misconfiguration

• CherryHQ cherry-studio
• CWE-829

FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

• labring FastGPT
• Privilege escalation
• CWE-494

NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause…

• NVIDIA TensorRT-LLM
• CWE-829

Visual Studio Code Security Feature Bypass Vulnerability

• Microsoft Visual Studio Code
• Information disclosure
• CWE-829

usestrix PyPI system_prompt.jinja inclusion of functionality from untrusted control sphere

• strix
• CWE-829

GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace

• cli
• CWE-829

OpenClaw's marketplace runtime extension metadata could point at unscanned payloads

• Command injection
• Code injection

<2026.5.18 · fixed in 2026.5.18