CWE-454: External Initialization of Trusted Variables or Data Stores
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
A kind of CWE-1419 Incorrect Initialization of Resource.
From the CWE List. © The MITRE Corporation.
Newest
- mcdope pam usb pam_usb: getenv() used in PAM context allows environment variable injection into local-check logic 6.3 Medium
- getkirby kirby Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header 9.1 Critical
- openclaw OpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables 5.4 Medium
- microsoft azure ad ssh login extension for linux Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability 8.1 High
- ibm aix, vios +1 more IBM AIX privilege escalation 7.4 High