CWE-94: Code Injection vulnerabilities

CVE-2026-12946 is a critical vulnerability in IBM Langflow OSS versions 1.0.0 through 1.10.0 that allows remote attackers to inject arbitrary code due to improper control of user-supplied code input. This flaw could lead to complete compromise of confidentiality, integrity, and availability of the affected system.

Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio component or theme schema values due to insufficient coverage and effectiveness of the input validation introduced for CVE-2025-4318. To remediate this issue, users should upgrade to version 2.20.6

CVE-2026-61536 is a high-severity code injection vulnerability in the masci banks product prior to version 2.4.3. It arises from unsafe dynamic import and attribute access of Python callables based on attacker-controlled input in Tool JSON objects within LLM prompt templates. This allows arbitrary code execution in the hosting process. The issue was fixed in version 2.4.3.

IBM Langflow OSS versions 1.0.0 through 1.10.1 have a critical vulnerability due to improper input validation in the PythonREPL sandbox, allowing code injection. This flaw can lead to complete compromise of confidentiality, integrity, and availability. The vulnerability is identified as CWE-94 and carries a CVSS 3.1 score of 9.9, indicating critical severity.

The Remote API WordPress plugin version 0.2 and earlier contains a critical vulnerability where it does not authenticate requests before deserializing user-supplied input. This flaw allows unauthenticated attackers to inject arbitrary PHP objects, potentially leading to remote code execution if a suitable gadget chain is present in the environment.

Inappropriate implementation in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-54666 is a high-severity vulnerability in swagger-typescript-api prior to version 13.12.2. The issue arises because OpenAPI path keys are passed into JavaScript template literals without proper escaping, allowing attacker-controlled input containing ${...} to be executed when the generated API client method is called. This improper neutralization of special elements leads to potential code injection. The vulnerability is fixed in version 13.12.2.

CVE-2026-54664 is a high severity code injection vulnerability in the swagger-typescript-api tool prior to version 13.12.2. The vulnerability arises because enum values from an OpenAPI specification are passed without proper escaping to template rendering code, allowing attacker-controlled input to inject executable code into generated TypeScript modules. This code executes when the generated module is imported. The issue is fixed in version 13.12.2.

swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates servers[0].url from src/code-gen-process.ts into the HttpClient constructor without escaping, allowing an attacker-controlled OpenAPI spec to inject code that executes when new HttpClient() or new Api() is constructed. This issue is fixed in version 13.12.2.

swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers[0].url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpolates apiConfig.baseUrl into the generated HttpClient baseUrl field without escaping, allowing an attacker-controlled OpenAPI spec to inject TypeScript static field code that executes when the generated fetch client module is imported. This issue is fixed in version 13.12.2.

The Cost Calculator Builder PRO WordPress plugin up to version 4.0.3 contains a critical remote code execution vulnerability due to improper sanitization in the js_to_php function. An unauthenticated attacker can exploit this by injecting malicious code into the orderDetails[*].originalValue field, which is passed unsafely to PHP eval(). The nonce intended as an authentication barrier is publicly exposed on all front-end pages, allowing attackers to bypass it. The vulnerability has a CVSS score of 9.8, indicating critical severity.

The Streamit WordPress theme before 4.5.2 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions (for example to create an administrator account), leading to privilege escalation and remote code execution.

CVE-2026-54653 is a high severity code injection vulnerability in koxudaxi's datamodel-code-generator affecting versions from 0.17.0 up to but not including 0.60.2. The tool generates Python models from various schema formats and improperly preserves attacker-controlled default_factory values, which are emitted into generated code. This allows execution of arbitrary Python expressions when the generated model is imported. The issue is fixed in version 0.60.2.

CVE-2026-54656 is a high-severity code injection vulnerability in koxudaxi's datamodel-code-generator affecting versions from 0.52.1 up to but not including 0.60.2. The tool generates Pydantic v2 models and other data models from various schema formats. The vulnerability arises because the software interpolates validators from the --extra-template-data option into @field_validator decorators without safe validation, allowing arbitrary Python code execution when the generated model is imported. This issue is fixed in version 0.60.2.

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema extensions to reach src/datamodel_code_generator/parser/jsonschema.py and generated import handling through Import.from_full_path and Imports.create_line in src/datamodel_code_generator/imports.py, allowing a newline to break out of an import statement and execute Python code when the generated model is imported. This issue is fixed in version 0.64.0.

CVE-2026-54621 is a high-severity code injection vulnerability in koxudaxi's datamodel-code-generator prior to version 0.60.1. The vulnerability arises because GraphQL Union description values are rendered into Python comments without neutralizing carriage returns, allowing attacker-controlled schema content to inject executable Python code into generated models. This malicious code executes when the generated models are imported. The issue is fixed in version 0.60.1.

A code injection vulnerability exists in koxudaxi datamodel-code-generator versions 0.51.0 through before 0.60.2. The issue arises because attacker-controlled JSON Schema content can inject Python code into generated field annotations without sufficient validation, leading to code execution when the generated module is imported. This vulnerability is fixed in version 0.60.2.

CVE-2026-54654 is a high-severity code injection vulnerability in koxudaxi's datamodel-code-generator affecting versions from 0.14.1 up to but not including 0.60.2. The issue arises because the --extra-template-data comment field is rendered into Python comments without neutralizing carriage returns, allowing attacker-controlled input to inject and execute arbitrary Python code when the generated models are imported. This vulnerability is fixed in version 0.60.2.

Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < 2.4.3 - An insecure form processing logic allowed code execution for forms that include the signature field type.