CWE-94: Code Injection vulnerabilities

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of code in eval/exec.

IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a critical code injection vulnerability (CWE-94) that allows remote attackers to execute arbitrary code due to improper control of code generation.

IBM Langflow OSS versions 1.0.0 through 1.12.8 contain a code injection vulnerability (CWE-94) that allows a remote attacker with low-privileged authenticated access to cause the Agentic Assistant to generate or submit component code with unblocked patterns. This can lead to arbitrary operating system command execution on the server, posing a high-severity risk.

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a code injection vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary commands due to improper control of code generation.

Contact Form by Supsystic WordPress plugin versions before 1.11.1 contain a server-side template injection vulnerability. This flaw allows an administrator to inject and execute arbitrary template code on the server via stored form-editor content. The injected code executes whenever a visitor loads a page with the affected form, enabling unauthenticated visitors to potentially access sensitive server-side information such as authentication salts and database credentials. The vulnerability is fixed in version 1.11.1.

Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions. In versions 0.31.2 through 0.40.5, `nvm_ls` filters installed versions with a sed program that embeds the requested version pattern in a `\#...#` address, escaping `.` (and, since 0.40.4, `#`) but not backslash. A version string containing `#` (or `\#`) therefore closes the address early, and the rest of it is parsed as sed commands: with GNU sed, the `e` command runs a shell command as the user; with BSD sed, the `w` and `r` commands write and read files. This is reachable whenever an attacker-influenced version string is passed to `nvm use`, `nvm which`, `nvm ls`, `nvm version`, `nvm run`, or `nvm exec`, or to `nvm-exec` via `NODE_VERSION`, and at least one version is installed. nvm's own `.nvmrc` parser strips comments, so a bare `nvm use` is not affected; however, the bash `cdnvm` and zsh `load-nvmrc` auto-switch hooks documented in the README read `.nvmrc` as-is and pass it to `nvm ls` and `nvm version`, so a user with one of those hooks installed runs the attacker's command just by changing into a directory under a malicious `.nvmrc`; scripts that run `nvm use "$(cat .nvmrc)"` are affected the same way. Version 0.40.6 passes any version pattern containing `#` or a newline through the `.nvmrc` content parser first, so no `#` reaches the sed program.

OpenCATS versions prior to 0.10.0 contain a vulnerability in the Professional License configuration feature that allows an authenticated administrator with Settings module access to inject arbitrary PHP code. This occurs because license key input is directly used in a PHP define() statement in config.php without proper escaping, enabling persistent code execution with web server privileges. The vulnerability is fixed in version 0.10.0.

CVE-2026-61564 is a critical code injection vulnerability in WWBN AVideo-Encoder versions prior to 8.1.0. The unauthenticated installer endpoint 'install/checkConfiguration.php' improperly interpolates user-supplied parameters into PHP string literals without escaping, allowing attackers to inject and execute arbitrary PHP code as the web-server user. Exploitation requires the absence of the 'videos/configuration.php' file, which occurs on fresh deployments or if the file is removed. The vulnerability also includes a secondary SQL injection vector. This flaw enables arbitrary command execution, file read/write access, persistent code execution, and control over database connection settings. The issue is fixed in version 8.1.0.

CVE-2026-118618 is a code injection vulnerability in the parse_model function of Ultralytics version 8.4.65. It allows remote attackers to execute arbitrary Python code by supplying a crafted string that is not properly validated. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability can lead to full compromise of the affected system under the current user's context.

CVE-2026-118616 is a code injection vulnerability in the Ultralytics software, specifically in the parse_model function. This flaw allows remote attackers to execute arbitrary Python code by supplying a malicious string that is not properly validated before execution. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability affects Ultralytics version 8.4.65 and has a high severity rating with a CVSS score of 7.8.

CVE-2026-118614 is a code injection vulnerability in the Ultralytics software, specifically in the check_det_dataset function. It allows remote attackers to execute arbitrary Python code by supplying a malicious string that is not properly validated. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file. The vulnerability affects version 8.4.65 of Ultralytics and has a high severity rating with a CVSS score of 7.8.

CVE-2026-67074 is a critical remote code execution vulnerability in HCL BigFix AEX version 13.0.0.1. It allows attackers to execute arbitrary code with the privileges of the affected application, potentially leading to unauthorized access, data exposure, or full system compromise.

Dell iDRAC Service Module (iSM) for Windows, Linux, and ESXi versions prior to 6.1.1.0 contain a code injection vulnerability (CWE-94). This flaw allows a high privileged local attacker to potentially elevate privileges. The vulnerability has a medium severity with a CVSS score of 4.2. A fix is available in version 6.1.1.0 and later.

CVE-2026-104383 is a critical code injection vulnerability in the Pigeon MFA service of EagleCloud Aquila on on-premises platforms. It affects versions up to and including 2.6.7.2. Authenticated remote attackers can exploit improper control of code generation to execute arbitrary code.

CVE-2026-58256 is a critical code injection vulnerability in JeromeDevome's GRR resource management application. Versions prior to 4.5.0 allow an administrator to inject malicious PHP code via LDAP connector configuration parameters, specifically through the ldap_filter setting. Successful exploitation requires the administrator to connect to an attacker-controlled LDAP server and submit crafted input, leading to remote code execution. This issue is fixed in version 4.5.0.

MLflow versions from 3.12.0rc0 up to but not including 3.17.0 contain a critical code injection vulnerability in the third-party scorer deserialization mechanism. This flaw allows an attacker to place a malicious Python module under a writable allowed package and invoke it via MLflow artifact endpoints, leading to remote code execution. Deployments without authentication are fully exposed, while basic-auth deployments require credentials with experiment creation and artifact upload permissions. The vulnerability is fixed in version 3.17.0.

Adobe Campaign Classic contains a critical code injection vulnerability (CWE-94) that allows a low-privileged attacker to execute arbitrary code without user interaction. The vulnerability affects version 0 of the product and changes the security scope, enabling code execution in the context of the current user.

Adobe Connect Desktop App contains a code injection vulnerability (CWE-94) that allows an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised webpage. The vulnerability affects versions from 0 up to and including 4.4. The issue impacts confidentiality, integrity, and availability, and is rated critical with a CVSS score of 9.6.

A cross-site scripting (XSS) vulnerability exists in the lxsmnsyc seroval library versions 1.6.0 through 1.6.10. The issue arises because the JavaScript-output APIs derive a typed array's constructor name from a property that can be attacker-controlled if untrusted properties are copied onto a typed array and then serialized. This allows execution of attacker-controlled JavaScript in the context of the page receiving the output. The vulnerability is fixed in version 1.6.11.