CWE-94: Code Injection vulnerabilities

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromise the site.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This vulnerability has a high severity with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability.

CVE-2026-93443 is a high-severity vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. It allows a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, classified as CWE-94 (Code Injection). The vulnerability requires low privileges and high attack complexity. No official patch information is provided in the input data.

CVE-2026-93449 is a high-severity vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. It allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation, classified as CWE-94 (Code Injection). The vulnerability has a CVSS 3.1 score of 8.5, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary code due to improper control of code generation. This vulnerability has a high severity with a CVSS score of 8.1. No patch or remediation details are provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code. This is due to improper neutralization of special elements in OS commands, enabling code injection without requiring user interaction or privileges.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary operating system commands. This occurs due to improper neutralization of special elements in OS command generation. The vulnerability has a high severity rating with a CVSS score of 8.1.

CVE-2026-97679 is a high-severity vulnerability in IBM Langflow OSS versions 1.0.0 through 1.12.2. It allows a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements in OS commands, a code injection flaw related to improper input validation.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a vulnerability that allows remote attackers with limited privileges to execute arbitrary code. This is due to an incomplete blocklist in the code security scanner, which fails to properly control code generation. The vulnerability has a high severity rating with a CVSS score of 8.8.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a code injection vulnerability (CWE-94) that allows a remote authenticated attacker to execute arbitrary code. This occurs due to improper neutralization of special elements used in code, potentially enabling a sandbox escape. The vulnerability has a high severity with a CVSS score of 8.8. No patch or official remediation information is provided in the available data.

IBM Langflow OSS versions 1.0.0 through 1.12.2 contain a critical vulnerability (CWE-94) that allows remote attackers to execute arbitrary code due to improper control of code generation. This vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and impacts confidentiality, integrity, and availability.

Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to execute arbitrary code when a user imports and runs or deploys a Bedrock Agent, via crafted configuration values incorporated into generated Python source without safe literal encoding. To remediate this issue, users should upgrade to version 0.3.14. Because this issue persists into generated source, upgrading alone is not sufficient: agents imported with an affected version must be re-imported with version 0.3.14 or later and their local and deployed output artifacts replaced.

CVE-2026-106446 is a critical code injection vulnerability in handlebars.js versions 4.0.0 up to but not including 4.7.10. The vulnerability arises because Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects without fully validating all node values, allowing untrusted input objects to inject arbitrary JavaScript code. This can lead to remote code execution on the server or malicious code execution in client environments where precompiled templates are used. Applications passing untrusted objects instead of strings to these functions are affected. The vulnerability has a CVSS score of 9.8, indicating critical severity.

CVE-2026-106441 is a high-severity code injection vulnerability in the hydra-ecosystem hydra project. The issue arises because Hydra passed its Python logging configuration directly to logging.config.dictConfig() without applying its target policy, allowing resolution and invocation of arbitrary importable classes and factories. This flaw enables an attacker who can control the logging configuration to execute arbitrary code with the application's privileges during logging setup. The vulnerability affects Hydra versions before 1.3.6 and prerelease versions from 1.4.0.dev0 up to but not including 1.4.0.dev9. Hydra 1.3.6 and later apply a hardened blacklist, and 1.4.0.dev9 and later introduce an execution whitelist to control callable invocation securely. Users are advised to upgrade to 1.3.6 or 1.4.0.dev9 or later and avoid composing logging configurations from untrusted sources.

PayloadCMS versions prior to 3.90.0 and canary versions before 4.0.0-canary.34 contain a code injection vulnerability in the public first-register operation. This flaw allows remote code execution when local authentication is enabled and no initial user has been created. The vulnerability is addressed in versions 3.90.0 and 4.0.0-canary.34.

## Impact A vulnerability in `@payloadcms/plugin-form-builder` in versions < 3.90.0 allow submissions which could be crafted to execute remote code on the server. **You are affected if:** - You are using `@payloadcms/plugin-form-builder` ## Patches Users should upgrade Payload packages to `>= 3.90.0` or `>= 4.0.0-canary.34`.

CVE-2026-105801 is a code injection vulnerability in openapi-python-client versions prior to 0.29.1. The tool generates Python clients from OpenAPI documents but does not safely neutralize malicious content in string, docstring, and f-string contexts. This allows attacker-controlled Python code to be included in the generated client, which executes upon import, potentially compromising the importing environment's integrity, confidentiality, and availability. The issue is fixed in version 0.29.1.

CVE-2026-105796 is a high-severity code injection vulnerability in Microsoft Kiota, an OpenAPI-based HTTP client code generator. Versions from 0.5.0 up to but not including 1.35.0 are affected. The issue arises because Kiota's Java and PHP documentation-comment sanitizers improperly handle block-comment terminators, allowing attacker-controlled OpenAPI text to be injected outside generated documentation comments. Exploitation requires a developer or build pipeline to generate and compile or load the maliciously crafted source code, leading to code execution in the consuming application or build environment. This vulnerability is fixed in version 1.35.0.

Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions.

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.