Download of Code Without Integrity Check
CWE-494
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
We track 122 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.4. 4 have been exploited in real attacks.
How this weakness is prevented
- Implementation: Perform proper forward and reverse DNS lookups to detect DNS spoofing.
- Architecture and Design Operation: Encrypt the code with a reliable encryption scheme before transmitting.
- Architecture and Design Operation: Run your code using the lowest privileges that are required to accomplish the necessary tasks. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.
Latest Download of Code Without Integrity Check vulnerabilities
- 8.8 High severity
AeroScope Mobile (TP703): Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature (CWE-347) in the firmware update handler of the management service (uavmonitor_usbv1) of the 1300 communications board in DJI AeroScope Mobile (TP703) firmware 03.00.00.26, with 1300 communications board firmwar
- 7.5 High severity
N-central: Download of Code Without Integrity Check
Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1.
- 9.1 Critical severity
FrodoBots EarthRover Mini+ firmware: Download of Code Without Integrity Check
FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. The STM32 motor‑controller firmware is fetched over unencrypted HTTP. Integrity is validated only via MD5, with the hash provided in the sam
- 7.2 High severity
Wingesfar: Download of Code Without Integrity Check
The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification.
- 9.2 Critical severity
Infantia: Download of Code Without Integrity Check
Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. Some update paths also permit archive traversal or script execution.
- 7.5 High severity
Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on…
Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows which allows an attacker to compromise or influence a release component and execute attacker-controlled code when a user runs the skill. On ma
- 8.4 High severity
PLCnext Engineer: Download of Code Without Integrity Check
The PFI plugin framework deploys executable assemblies (DLLs) from a signed plugin package into the local plugin repository and loads them via reflection, but the deployment routine processes archive entries that were never covered by the signature verificatio
- 7.4 High severity
Red Hat OpenShift Container Platform 4.14: Download of Code Without Integrity Check
A flaw was found in openshift-ansible. The installer container's `run` script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle (MITM) attack or compromising the HTT
- 9.6 Critical severity
Creative Sound Blaster Katana V2, V2X, SE: Download of Code Without Integrity Check
A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected device.
- 7.5 High severity
Robot firmware (mode 104000): Download of Code Without Integrity Check
EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP and do not verify their integrity or authenticity. An attacker able to intercept o
- 7.5 High severity
Adoptium Temurin: Download of Code Without Integrity Check
In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page /[locale]/download takes a download URL from the "link" query parameter and automati
- 7.5 High severity
claude-code: Download of Code Without Integrity Check
Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character SHA. An attacker who
- 7.5 High severity
powerlevel10k: Download of Code Without Integrity Check
Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity checks when no SHA-256 utility exists. Network-positioned attackers can interce
- 7.5 High severity
astron-rpa: Download of Code Without Integrity Check
AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's auto-update mechanism. Attackers positioned between the client and server can s
- 7.5 High severity
nginx-ui: Download of Code Without Integrity Check
Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained from the same upgrade mirror. A compromised mirror or network attacker able to a
- 7.1 High severity
700 Series: Download of Code Without Integrity Check
No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can scan a network for N-Tron devices and push/pull firmware without authenticating b
- 8.4 High severity
Mitel MiVoice Office 400: External Control of File Name or Path
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying t
- 8.5 High severity
Mitel MiVoice Office 400: Improper Limitation of a Pathname to a Restricted Directory
DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary files into the system during restoration. The specific flaw exists within the ba
- 7.5 High severity
GitAhead: Download of Code Without Integrity Check
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate o
- 7.7 High severity
virtualenv: Download of Code Without Integrity Check
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, download_wheel() accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest
- 9.8 Critical severity
Secure Connect Gateway (SCG) Policy Manager: Download of Code Without Integrity Check
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerabili
- 8.8 High severity
Reachy Mini: Missing Authentication for Critical Functionality
The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachy_mini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Depends(get_app_manager), which just han
- 7.1 High severity
joplin: Insufficient Verification of Data Authenticity
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Desktop for Windows omits publisherName from packages/app-desktop/package.json, so the generated app-update.yml causes NsisUpdater.
- 7.3 High severity
Sublime Text 4: Download of Code Without Integrity Check
Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sublime Text 3) contains a local privilege escalation vulnerability that allows unprivileged local attackers to execute arbitrary code with elevated privileges by abusing the update s
- 7.5 High severity
Jenkins Script Security Plugin: Download of Code Without Integrity Check
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the first download and loading the classpath entries from the second, allowing attackers able to define classpath entries t
- 9.1 Critical severity
SmartFabric OS10 Software: Download of Code Without Integrity Check
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
- 7.4 High severity
Secure Connect Gateway 5.0 - Application: Download of Code Without Integrity Check
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vuln
- 9.8 Critical severity
essential-moos: Download of Code Without Integrity Check
MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary programs by publishing a crafted MISSION_FILE message to the MOOSDB. Attackers can publish a mission file conta
- 7.8 High severity
Transformers: Improper Check for Dropped Privileges
A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.load_custom_generate(). The function fetches and caches a remote module fi
- 8.3 High severity
hermes-agent: Download of Code Without Integrity Check
Hermes Agent 0.18.2 prior to 0.19.0 contains a supply chain vulnerability in its bundled MCP catalog that allows a remote attacker to execute arbitrary code by compromising a third-party upstream repository referenced via a mutable branch rather than a pinned
- 8.1 High severity
Spring for GraphQL: Download of Code Without Integrity Check
The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page. Sp
- 8.8 High severity
NemoClaw: Download of Code Without Integrity Check
NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, informa
- 9.8 Critical severity
NemoClaw: Download of Code Without Integrity Check
NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, inform
- 9.3 Critical severity
WatchGuard Agent: Missing Authentication for Critical Functionality
Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges.
- 10.0 Critical severity
OZOLS: Cleartext Transmission of Sensitive Information
Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext transmission of sensitive information vulnerability in Ozols Grupa OZOLS on Windows caused by an abandoned auto-update domain. Affected component:
- 7.3 High severity
stigmem: Download of Code Without Integrity Check
stigmem-node 0.9.0a1 allows plugin signature enforcement to be disabled via a single configuration flag without a second explicit acknowledgment. If that setting is carried into an environment where plugin directories are writable by less-trusted users, unsign
- 7.5 High severity
ZeroBrew: Download of Code Without Integrity Check
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs withou
- 9.6 Critical severity
i Access Client Solutions: Download of Code Without Integrity Check
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i. A bad actor could use this vulnerablity to run compromised code on the ACS user's workstation.
- 9.3 Critical severity
streambert: Download of Code Without Integrity Check
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 contain an unvalidated auto-updater URL vulnerability that allows a compromised renderer process to make the main process download and execute an
- 7.3 High severity
eParakstītājs 3.0: Improper Certificate Validation
eParakstītājs 3.0 for Windows before version 1.10.0 retrieves and executes its automatic updates over a channel that is not authenticated or integrity-protected. On each launch the application fetches an update descriptor (XML) over TLS but accepts any TLS cer