CVE-2026-112102: Code Injection in AXA Group NLP.js
Description
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS v4.0
Score 5.3medium
Affected software
AXA Group
NLP.js
cpe:2.3:a:axa_group:nlp.js:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in AXA Group NLP.js 4.27.0 within the Evaluator.walkFunction of packages/evaluator/src/evaluator.js. Manipulating the 'condition' argument leads to code injection, which can be triggered remotely without privileges or user interaction. The issue was reported early to the project but remains unaddressed. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, partial user interaction, and low impact on confidentiality, integrity, and availability. Public exploit code is available, increasing risk.
Potential Impact
Successful exploitation allows remote attackers to inject and execute arbitrary code within the affected NLP.js component. This could lead to unauthorized code execution in the context of the application using NLP.js 4.27.0. The impact is rated medium due to partial impacts on confidentiality, integrity, and availability, and the requirement for some user interaction.
Mitigation Recommendations
No official patch or vendor advisory is currently available. Users should monitor the AXA Group NLP.js project for updates and consider applying any forthcoming fixes promptly. Until a fix is released, avoid using version 4.27.0 in untrusted environments or restrict access to the vulnerable functionality to mitigate risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-18T17:33:02.651Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad5eb162cdf04f6563eab61
Added to database: 10/19/2026, 10:04:06 UTC
Last enriched: 10/19/2026, 10:18:31 UTC
Last updated: 10/19/2026, 17:05:00 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.