CWE-829: Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions8.4 High
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Data Exfiltration via Markdown Image Rendering in AI Chat6.7 Medium
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Indirect Prompt Injection via Auto-Loaded Workspace Prompt Template Files in AI Chat8.4 High
- eclipse theia, the eclipse foundation eclipse theia +1 more[Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat8.4 High
- dell powerflex, powerflex manager +1 moreDell PowerFlex Manager, version(s) Version prior to 4.8, contain(s) an Inclusion of Functionality...7.5 High
- earendil-works piPi loads project-local extensions without approval4.4 Medium
- cursorCursor Desktop sandbox escape via Claude hook configuration8.5 High
- foxit aiDoS + Remote Code Execution via PDF JavaScript in Foxit AI8.6 High
- openclawOpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata7.7 High
- duck-organization duck-siteDuck Site: Untrusted pull request code can trigger privileged production deployment9.5 Critical
- vimVim: Arbitrary Code Execution via Python Omni-Completion7.3 High
- duck-organization quest-botQuest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment.9.5 Critical
- pdm-project pdmpdm: Project-Controlled `.pdm-plugins` Content Executes Before CLI Parsing8.4 High
- microsoft visual studio code, visual studio code - mssql extension +1 moreVisual Studio Code MSSQL Extension Remote Code Execution Vulnerability7.8 High
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an...7.1 High
- securly, securly chrome extension +1 moreCVE-2026-88797.5 High
- synology active backup for business recovery media creatorAn inclusion of functionality from untrusted control sphere vulnerability in OpenSSL...7.8 High
- synology hyper backup explorerAn inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component...7.8 High
- huggingface huggingface/transformers, transformers, red hat openshift lightspeed +7 more +9 morePolicy Bypass in LightGlue Nested Config Resolution in huggingface/transformers8.0 High
- home-assistant home assistant coreHome Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore9.3 Critical
- mervinpraison praisonaiPraisonAI: Arbitrary code execution via unguarded `spec.loader.exec_module` in `agents_generator.py` - sibling of CVE-2026-443348.1 High
- espressif shared-github-dangerjsEspressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint8.2 High
- yeoman environmentyeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation8.6 High
- docker desktopDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loading8.8 High
- docker desktopDocker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends8.8 High
- concrete cms cms, concretecms concrete cms +1 moreCSRF token is not validated in the core CMS update controller for Concrete CMS 9.5.0 and below7.5 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF on prepare_remote_upgrade() leading to one-request RCE via package overwrite7.5 High
- mate-desktop atril, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +11 more +13 morePDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen8.4 High
- axllent mailpitMailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs5.9 Medium
- rapid7 metasploit proMetasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading8.5 High
- kde kdenliveKdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project...6.5 Medium
- mervinpraison praisonaiPraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection9.4 Critical
- electermelecterm: dangerous code can be run through links or command line9.4 Critical
- electermelecterm: Path traversal in electerm runWidget leads to arbitrary code execution8.4 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape9.9 Critical
- premailer css parsercss_parser allows to MITM included https css urls5.8 Medium
- lightningai pytorch lightning, lightning-ai pytorch-lightning, red hat ai inference server +2 more +4 moreCompromise of PyTorch Lightning PyPi Package Versions9.3 Critical
- openstack ironic-python-agent, ironic python agent, red hat openshift container platform 4 +4 more +6 moreOpenStack Ironic Python Agent Includes Functionality from Untrusted Control Sphere8.0 High
- openstack ironicOpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere6.6 Medium
- pip maintainers pippip self-update functionality can import newly installed modules after wheel installation5.3 Medium
- openclawOpenClaw < 2026.4.20 - Arbitrary Code Execution via MCP stdio Environment Variables5.4 Medium
- redhat instructlab, red hat enterprise linux ai (rhel ai) 3, redhat enterprise linux ai +2 moreInstructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true`8.8 High
- goshsGoshs - ArtiPACKED Vulnerability – GitHub Actions Credential Persistence9.1 Critical
- iterm2In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC...6.9 Medium
- openclawOpenClaw < 2026.4.9 - Untrusted Provider Plugin Auto-enablement via Workspace Provider Auth7.7 High
- openclawOpenClaw < 2026.4.10 - Untrusted Workspace Plugin Shadow Resolution in Channel Setup7.7 High
- rapid7 insight agentLocal Privilege Escalation via OpenSSL configuration file in Insight Agent8.5 High
- luanti-org luanti, minetest +1 moreLuanti has a mod security sandbox escape9.0 Critical
- luantiLuanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.9.3 Critical
- mervinpraison praisonaiPraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence9.1 Critical
- Show moreLoading…