The Hugging Face LeRobot library versions 0.4.0 through 0.6.1 are vulnerable to arbitrary code execution due to unsafe dynamic class instantiation in the from_pretrained() method. This occurs when loading a policy's processor configuration from a repository, where the library uses the class field in JSON configuration to dynamically import and instantiate Python classes without proper validation.
CVE-2026-115188 is a critical unrestricted file upload vulnerability in Mautic core versions 7.0.0 up to but not including 7.2.2. It affects the campaign import feature, allowing an authenticated user with campaign import permissions to upload arbitrary files, including server-side scripts, to a publicly accessible media directory. This can lead to remote code execution with the privileges of the web server user, exposing sensitive configuration and contact data. The vulnerability does not require administrator privileges and is fixed in version 7.2.2.
The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remote Code Execution that any unauthenticated visitor can trigger.
The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user.
A non-admin user with only accessCp can place newline characters in X-Craft-Plugin-Licenses. Craft passes this value to its .env writer without removing the newlines.
This lets the user insert a new attacker-known CRAFT_SECURITY_KEY into .env. After Craft loads that key, the user can forge a signed login redirect containing a Twig system() callback.
This is different from the previous report. That report reads the existing key through a Twig sandbox bypass. This report replaces the key through fake API headers and CRLF injection. Fixing either source does not fix the other.
CVE-2026-115895 is a high-severity code injection vulnerability in the happy-dom JavaScript library versions 17.0.0 through 21.0.3. The flaw arises from improper validation of named ESM import aliases, allowing attacker-controlled input to execute arbitrary JavaScript code in the Node.js host process when enableJavaScriptEvaluation is enabled. This vulnerability is a residual issue following an incomplete fix for a previous related vulnerability. The issue is fixed in version 21.0.4.
CVE-2026-53942 is a critical code injection vulnerability in the Conda Organization Infrastructure. It involves a GitHub Actions workflow triggered by issue comments that can lead to rendering attacker-controlled templates using an unsandboxed Jinja2 environment. This allows untrusted pull request or comment content to execute code in a privileged token context. The vulnerability has been patched in commit 9c0f238.
CVE-2026-57142 is a high-severity OS command injection vulnerability in MervinPraison's PraisonAI multi-agent teams system. Versions from 4.5.87 up to but not including 4.6.61 are affected. The flaw arises because the recipe execution policy only checks dangerous tools declared in TEMPLATE.yaml, but steps-based recipes can self-approve dangerous tools like execute_command via workflow.yaml, bypassing the intended restriction. This allows untrusted recipes to execute critical shell commands without explicit permission. The issue has been fixed in version 4.6.61.
CGM CLININET contains a critical code injection vulnerability in its RunCGI.pm component. This flaw allows an attacker on an adjacent network to supply a crafted query parameter that causes the system to import and execute an attacker-controlled module with root privileges. The vulnerability is fixed in version 2026.MS3.
CGM CLININET contains a code injection vulnerability in its ConvExpr function that processes Perl expressions into RTF document content. An authenticated attacker with high privileges can exploit this flaw to execute arbitrary code with root privileges. The vulnerability affects versions up to 2026.MS3. A patch is available, and the product is a cloud service with vendor-managed remediation.
The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check when updating a post through one of its front-end form actions, allowing unauthenticated visitors to overwrite arbitrary posts, including the ones in which the site stores its own field definitions, which in turn leads to arbitrary code execution on the server. Exploitation requires the site to publish a form whose post-update action maps both its target and its content to visitor-submitted values.
A code injection vulnerability (CWE-94) exists in the WP Ultimate Review WordPress plugin versions before 2.4.5. The plugin does not properly neutralize shortcodes in certain review fields submitted via its public review form, which is accessible to unauthenticated users. This flaw allows attackers to execute arbitrary shortcodes when the affected field is displayed, assuming user reviews and the relevant field display are enabled.
A path traversal vulnerability (CWE-22) in Storybook development server versions from 8.0.0 up to but not including 8.6.19, 9.0.0 up to 9.1.21, 10.0.0 up to 10.6.2, and 11.0.0-alpha.0 up to 11.0.0-alpha.6 allows an attacker on the local network to obtain the WebSocket authentication token. This token can be used to invoke file-writing or testing functionality, potentially leading to code execution if the Vitest addon is installed with an old Vitest version. The issue is fixed in versions 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6.
CVE-2026-92207 is a code injection vulnerability in the OpenBBtable class of MindsDB version 25.10.1. It allows authenticated remote attackers to execute arbitrary Python code due to improper validation of user-supplied input. This can lead to full compromise of the service account running MindsDB.
CVE-2026-114125 is a code injection vulnerability in Storybook, a frontend UI component development tool. Versions from 8.0.0 up to but not including 8.6.19, 9.0.0 up to 9.1.21, 10.0.0 up to 10.6.2, and 11.0.0-alpha.0 up to 11.0.0-alpha.6 are affected. The flaw allows a malicious website to interact with the preview iframe of a running Storybook development server due to insufficient iframe embedding and message-origin restrictions. An attacker can cause unauthorized changes to story files if a developer visits and interacts with the malicious site, potentially leading to arbitrary code execution with the developer's privileges when the modified files are executed locally. Fixed versions include 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6.
CVE-2026-113776 is an OS command injection vulnerability in pypa virtualenv versions from 20.26.6 up to but not including 21.14.2. The issue arises from the way ViaTemplateActivator.instantiate_template() replaces placeholders in activation templates, allowing crafted values in environment paths or prompts to break out of quoting and execute arbitrary commands when activating the environment. This affects activation scripts for bash, fish, xonsh, and activate_this.py. The vulnerability is fixed in version 21.14.2.
CVE-2026-113718 is a code injection vulnerability in pypa virtualenv versions prior to 21.14.9. The issue arises from how the POSIX xonsh activation script writes non-ASCII prompt or destination data using repr(), which under certain legacy multibyte encodings like GBK or Big5 can allow an attacker to inject and execute arbitrary code when the generated script is sourced. This vulnerability is fixed in version 21.14.9.
Vitest, a Vite-native testing framework for JavaScript and TypeScript, contains a code injection vulnerability in versions from 2.1.0-beta.7 up to but not including 4.1.12 and from 5.0.0 up to but not including 5.0.3. An unauthenticated non-browser WebSocket client can exploit this by registering a manual mock with an attacker-controlled URL that is inserted unescaped into generated module source. This leads to execution of attacker-controlled JavaScript on the development server origin when the developer's browser loads the module. The issue is fixed in versions 4.1.12 and 5.0.3.
CVE-2024-4412 is a code injection vulnerability in WSO2 Enterprise Integrator that allows injection of malicious Expression Language (EL) code due to insufficient validation of user-supplied data. Exploitation requires administrator privileges and the impact is limited to certain read operations, resulting in minimal impact.
CVE-2026-83531 is a code injection vulnerability in Apache Camel affecting versions from 4.4.0 before 4.18.5 and from 4.19.0 before 4.22.1. It arises from the dynamic-router-control endpoint allowing untrusted expressions to be compiled and evaluated with Camel process privileges. Exploitation requires the ability to send messages to a transport routed to this endpoint, with no additional authentication needed. The issue is fixed in versions 4.18.5, 4.22.1, and later 4.23.0.