CWE-829: Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- ozols grupa ozolsCritical flaw impacting OZOLS ERP's automatic update channel10.0 Critical
- orval-labs orvalOrval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1 High
- poxenstudio talebookMyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File9.4 Critical
- vimVim: Arbitrary Ex Command Execution in C Omni-Completion7.1 High
- supsystic easy google mapsWordPress Easy Google Maps plugin < 1.14.2 - Remote File Inclusion vulnerability7.2 High
- eclipse foundation theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control...8.4 High
- postgresqlPostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands8.1 High
- postgresqlPostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client8.8 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image9.0 Critical
- microsoft python, python extension for visual studio code +1 moreVisual Studio Code Python Extension Security Feature Bypass Vulnerability7.8 High
- microsoft .net, .net 8.0 runtime, .net 9.0 runtime +4 more +6 more.NET Information Disclosure Vulnerability6.5 Medium
- vimVim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`8.4 High
- red hat jboss enterprise application platform 7.4 els on rhel 7, jboss enterprise application platform 7.4.25, jboss enterprise application platform 8.1 +5 more +7 moreOpenjdk-orb: unauthed class loading via iiop in eap8.1 High
- rrrene html sanitize ex, htmlsanitizeex +1 morehtml_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding2.3 Low
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code7.8 High
- mistralai mistral-vibeMistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook8.6 High
- cjcollier google::authGoogle::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call9.8 Critical
- microsoft kiotaKiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)6.1 Medium
- eximExim before 4.99.5 allows .forward privilege escalation because force_command for a pipe...7.4 High
- jetbrains pycharmIn JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python...8.6 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting...7.8 High
- jetbrains phpstormIn JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project...8.4 High
- jetbrains phpstormIn JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project...8.4 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible via a project-supplied...7.8 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...8.4 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...8.4 High
- jetbrains webstormIn JetBrains WebStorm before 2026.2 arbitrary code execution was possible before granting project...8.4 High
- meshtastic firmwareMeshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow10.0 Critical
- sipeed picoclawSipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere4.8 Medium
- tailcallhq forgecodeForgeCode Arbitrary Code Execution via Unvetted .mcp.json in Untrusted Repository8.4 High
- openclawOpenClaw < 2026.5.22 Untrusted Plugin Loading via Setup-mode7.1 High
- microsoft kiotaKiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1 High
- microsoft kiotaKiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions9.3 Critical
- microsoft kiotaKiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`9.3 Critical
- microsoft kiotaKiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF7.0 High
- cherryhq cherry-studioCherry Studio RCE via SearchService nodeIntegration Misconfiguration8.6 High
- labring fastgptFastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows9.3 Critical
- nvidia tensorrt-llmNVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper...6.3 Medium
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability8.8 High
- usestrix strixusestrix PyPI system_prompt.jinja inclusion of functionality from untrusted control sphere2.3 Low
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via tools.py8.5 High
- cliGitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace4.4 Medium
- cdeust cortexCortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`7.1 High
- hiyouga llama-factory, llamafactory +1 moreLLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path9.3 Critical
- snowflake cliSnowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load4.1 Medium
- pnpmpnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes8.8 High
- pnpmpnpm: Repository-controlled configDependencies can select a pacquet native install engine7.5 High
- pnpmpnpm: manifest identity spoof satisfies allowBuilds and runs attacker lifecycle7.5 High
- mispMISP remote code execution via arbitrary rdkafka configuration path9.3 Critical
- containerdcontainerd: CRI checkpoint import allows local image tag poisoning5.6 Medium
- Show moreLoading…