CWE-829: Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
A kind of CWE-669 Incorrect Resource Transfer Between Spheres.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Common Log File System Driver Elevation of Privilege Vulnerability7.0 High
- saltyorg docsSalty documentation workflow executes fork-controlled Python build hooks with deployment secrets10.0 Critical
- microsoft .net 10.0 runtime, .net 8.0 runtime, .net 9.0 runtime +2 more +4 more.NET Remote Code Execution Vulnerability7.5 High
- omarchyomarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because...7.1 High
- typesettingtools aegisubAegisub executes arbitrary code through automatically loaded Automation scripts7.8 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...7.5 High
- checkmk gmbh checkmkmk-oracle: Local privilege escalation via malicious Oracle Instant Client5.2 Medium
- docling, docling-project docling-slim +1 moreDocling: Plugin entry points are imported before the allow_external_plugins check6.7 Medium
- cookpete auto-changelogauto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF8.4 High
- the document foundation libreofficeRCE via calcext:data-mappings, sql provider and jdbc connector8.5 High
- mitel mivoice office 400Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution8.4 High
- mitel mivoice office 400Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution8.4 High
- c4illin convertxIn ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes...9.4 Critical
- tryghost ghostGhost: Remote Code Execution via Theme Translation Files7.2 High
- tryghost ghostGhost from 6.10.3 before 6.64.0 RCE via Theme Translation Files8.6 High
- netbox-community devicetype-libraryNetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files6.5 Medium
- authlibCVE-2026-1040569.8 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was...7.8 High
- basercms users community bcaddonmigratorWhen converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config...8.6 High
- watchguard fireware, fireware os +1 moreFireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution9.2 Critical
- red hat pen drive powered by red hat lightspeed, openshift container platform 4.19, openshift container platform 4.20 +2 more +4 moreKube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo7.1 High
- networkupstools nutNetwork UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN8.2 High
- amazon kiro ideKiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces8.6 High
- apache software foundation dorisApache Doris: JDBC driver URL validation bypass leads to remote code execution6.5 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.8 High
- gnu emacsGNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an...7.5 High
- laurent22 joplinJoplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows2.5 Low
- mistralai mistral-vibeMistral Vibe before 2.25.5 Remote Code Execution via git post-checkout8.6 High
- carecam hmt.cm2507 firmwareCareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere7.0 High
- netbox-community devicetype-libraryNetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI5.3 Medium
- netbox-community devicetype-libraryNetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft8.8 High
- netbox-community devicetype-libraryNetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request9.6 Critical
- patriksimek vm2vm2 before 3.11.7 Module Allowlist Bypass via Custom Resolver9.4 Critical
- patriksimek vm2vm2 before 3.11.7 Sandbox Escape via CLI require9.3 Critical
- amazon kiro ideKiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration6.7 Medium
- google cloud gemini cliArbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME7.7 High
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Code Execution via Auto-Loaded Configuration File2.4 Low
- jordanburke functypeFunctype: MCP set_functype_version Package Alias RCE via Unsanitized pnpm install + Dynamic Import7.8 High
- candid82 jokerJoker linter executed project-local .jokerd/linter.* files during linting7.8 High
- mlflowCode execution can occur in versions of the MLflow platform running version 0.0.1 or newer,...8.6 High
- knowns-dev knownsknowns before 0.30.0 Arbitrary Code Execution via LSP Binary8.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a...7.8 High
- axolotl-ai-cloud axolotlAxolotl before 0.19.0 Remote Code Execution via Multipack Patching8.7 High
- exterro ftk imagerExterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing6.8 Medium
- dell powerstore 1000t, powerstore 1200t, powerstore 3000t +10 more +12 moreDell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere...8.8 High
- gitlabInclusion of Functionality from Untrusted Control Sphere in GitLab7.3 High
@nocobase/servernpmNocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code executionNo score- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials8.0 High
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreMce-operator-bundle: all github actions pinned by mutable tag, not commit sha7.7 High
- Show moreLoading…