CWE-829: Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- mervinpraison praisonaiPraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading7.8 High
- mervinpraison praisonaiPraisonAI Affected by Untrusted Remote Template Code Execution9.3 Critical
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access8.5 High
- openclawOpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup8.5 High
- openclawOpenClaw < 2026.3.28 - Arbitrary Code Execution via Mirror Mode Sandbox File Conversion5.4 Medium
- checkmkomd: Local privilege escalation when executing omd commands as root9.3 Critical
- openclawOpenClaw < 2026.3.31 - Environment Variable Override of Plugin Trust Root8.5 High
- openclawOpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override8.5 High
- freescoutFreeScout: Host Header Injection Leading to External Resource Loading and Open Redirect in FreeScout5.4 Medium
- broadcom data loss preventionElevation of Privileges in Symantec Data Loss Prevention Windows Endpoint7.8 High
- wazuh, wazuh provisioning scripts (agent build environment) +1 moreWazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE6.3 Medium
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability4.3 Medium
- fastgptFastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.yml9.4 Critical
- aws kiro ideArbitrary code execution via crafted project files in Kiro IDE8.5 High
- linuxfoundation onnx, red hat openshift ai (rhoai), openshift ai 2.25 +2 moreONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack8.6 High
- thermalright tr-vision homeDLL Injection Privilege Escalation8.4 High
- openclawOpenClaw < 2026.3.12 - Arbitrary Code Execution via Auto-Discovery of Workspace Plugins8.6 High
- miazzy oa-font-serviceAn issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was...9.8 Critical
- wp royal royal elementor addonsWordPress Royal Elementor Addons plugin <= 1.7.1052 - Other vulnerability Type vulnerability8.2 High
- openclawOpenClaw 2026.2.22 < 2026.2.23 - Arbitrary Binary Execution via $SHELL Environment Variable Trusted Prefix Fallback5.8 Medium
- openclawOpenClaw < 2026.2.24 - Binary Hijacking via Static Default Trusted Directories in safeBins7.0 High
- mattermost, mattermost desktop +1 moreMattermost allows external websites to open within the app, exposing preload functionality to non-trusted sites.4.6 Medium
- clevertap web sdkCleverTap Web SDK is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage8.3 High
- openlit, openlit software development kit +1 moreOpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows10.0 Critical
- alex4ssb adb-explorer, adb explorer +1 moreADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)8.8 High
- alex4ssb adb-explorerADB Explorer Vulnerable to RCE via Insufficient Input Validation7.8 High
- gnu inetutilstelnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing...7.4 High
- slyde.js slydeSylde has Improper Control of Generation of Code7.6 High
- opens100 project opens100OpenS100 Portrayal Engine Unrestricted Lua Standard Library Access9.4 Critical
- bulwarkmail webmailRoundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS)...4.7 Medium
- streetsidesoftware vscode-spell-checkervscode-spell-checker has a workspace-trust bypass Code Execution7.8 High
- eclipse theia website, eclipse foundation theia - website +1 moreIn the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview...10.0 Critical
- langflowLangflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability9.8 Critical
- gradleGradle's failure to disable repositories failing to answer can expose builds to malicious artifacts8.6 High
- gradleGradle fails to disable repositories which can expose builds to malicious artifacts8.6 High
- made i.t. formsUmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation7.5 High
- alibaba fastjson, red hat openshift service mesh 2, build of apache camel for spring boot 4 +5 more +7 moreFASTJSON Includes Functionality from Untrusted Control Sphere10.0 Critical
- pro-bravia sony bravia digital signage, sony bravia signage +1 moreSony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion5.3 Medium
- fibar group s.a. home center 2, home center 3, home center lite +2 moreFIBARO System Home Center 5.021 Remote File Inclusion via Proxy API5.1 Medium
- asfhtgkdavid theshittheshit vulnerable to unsafe loading of user-owned Python rules when running as root.6.7 Medium
- mintlify, mintlify platform +1 moreThe Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject...6.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project...2.7 Low
- nxlog agentNXLog Agent before 6.11 can load a file specified by the OPENSSL_CONF environment variable.8.1 High
- n8nn8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook9.4 Critical
- akamai guardicore platform agentAkamai Guardicore Platform Agent before 52.1.1 allows an unprivileged user to fully elevate...7.8 High
- factionsecurity factionFACTION Unauthenticated Custom Extension Upload leads to RCE9.7 Critical
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could...7.3 High
- siemens spectrum power 4A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The...8.7 High
- openwebui open webui, open-webui +1 moreOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events7.3 High
- bizerba brain2Scripts for the module Global_Shipping executable on BRAIN2 Server8.4 High
- Show moreLoading…