Improper Neutralization of Directives in Dynamically Evaluated Code
CWE-95
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. eval).
We track 182 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 9.0. 4 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design Implementation: If possible, refactor your code so that it does not need to use eval() at all.
- Implementation: For Python programs, it is frequently encouraged to use the ast.literal_eval() function instead of eval, since it is intentionally designed to avoid executing code. However, an adversary could still cause excessive memory or stack consumption via deeply nested structures, so the python documentation discourages use of ast.literal_eval() on untrusted data.
Latest Improper Neutralization of Directives in Dynamically Evaluated Code vulnerabilities
- 9.3 Critical severity
Secure Email Gateway: Improper Neutralization of Directives in Dynamically Evaluated Code
SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.
- 8.6 High severity
PPTAgent: Improper Neutralization of Directives in Dynamically Evaluated Code
PPTAgent is an agentic framework for reflective PowerPoint generation. Prior to commit 418491a, PPTAgent is vulnerable to arbitrary code execution via Python eval() of LLM-generated code with builtins in scope. This issue has been patched via commit 418491a.
- 8.8 High severity
BLT: Improper Control of Generation of Code
OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more. Versions prior to 2.1.1 contain an RCE vulnerability in the .github/workflows/regenerate-migrations.yml workflow. The workflow uses the
- 8.8 High severity
chamilo-lms: Improper Neutralization of Directives in Dynamically Evaluated Code
Chamilo LMS is a learning management system. Prior to .0.0-RC.3, the PlatformConfigurationController::decodeSettingArray() method uses PHP's eval() to parse platform settings from the database. An attacker with admin access (obtainable via Advisory 1) can inje
- 9.8 Critical severity
MetaGPT: Improper Control of Generation of Code
A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fill of the file metagpt/actions/action_node.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of
- 7.2 High severity
Insight Agent: Improper Neutralization of Directives in Dynamically Evaluated Code
An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root via a crafted beacon response. Because the Agent uses mutual TLS (mTLS) to verify co
- 7.2 High severity
Dolibarr ERP/CRM: Improper Control of Generation of Code
Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidden string checks in whitelist mode and does not detect PHP dynamic callable syntax. Attackers
- 9.8 Critical severity
Agno: Improper Neutralization of Directives in Dynamically Evaluated Code
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the field_type parameter passed to eval(). Attackers can influence the field
- 10.0 Critical severity
Tautulli: Improper Control of Generation of Code
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the str_eval() function in notification_handler.py implements a sandboxed eval() for notification text templates. The sandbox attempts to restrict callable
- 9.8 Critical severity
GRID::Machine: Improper Neutralization of Directives in Dynamically Evaluated Code
GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization. GRID::Machine provides Remote Procedure Calls (RPC) over SSH for Perl. The client connects to remote hosts to execute code on them. A compromised or malic
- 9.8 Critical severity
letta: Improper Control of Generation of Code
A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/functions/ast_parsers.py of the component Incomplete Fix CVE-2025-6101. Performing a manipulation results in improper neutralization of direct
- 9.8 Critical severity
Woocommerce Custom Product Addons Pro: Improper Neutralization of Directives in Dynamically Evaluated Code
The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval() in the process_custom_formula() function within includes/process/price.php.
- 9.8 Critical severity
Langflow Code Injection Exploited
Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data parameter
- 9.6 Critical severity
SIMATIC Drive Controller CPU 1504D TF: Improper Neutralization of Directives in Dynamically Evaluated Code
Affected devices do not properly sanitize contents of trace files. This could allow an attacker to inject code through social engineering an authorized user, who has the function right "Read diagnostics", to import a specially crafted trace file. The malicious
- 8.1 High severity
locutus: Improper Neutralization of Directives in Dynamically Evaluated Code
Locutus brings stdlibs of other programming languages to JavaScript for educational purposes. Prior to version 3.0.0, a remote code execution (RCE) flaw was discovered in the locutus project, specifically within the call_user_func_array function implementation
- 9.8 Critical severity
chamilo-lms: Improper Neutralization of Directives in Dynamically Evaluated Code
Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Execution. This issue has been patched in version 1.11.28.
- 9.1 Critical severity
Vitrage: Improper Neutralization of Directives in Dynamically Evaluated Code
In the query parser in OpenStack Vitrage before 12.0.1, 13.0.0, 14.0.0, and 15.0.0, a user allowed to access the Vitrage API may trigger code execution on the Vitrage service host as the user the Vitrage service runs under. This may result in unauthorized acce
- 9.0 Critical severity
n8n: Improper Control of Generation of Code
n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability existed in n8n's Form nodes that could allow an unauthenticated attacker to inject and evaluate arbitrary n8n e
- 9.0 Critical severity
budibase: Improper Control of Generation of Code
Budibase is a low code platform for creating internal tools, workflows, and admin panels. Prior to version 3.30.4, an unsafe `eval()` vulnerability in Budibase's view filtering implementation allows any authenticated user (including free tier accounts) to exec
- 9.9 Critical severity
N8n: Improper Neutralization of Directives in Dynamically Evaluated Code
n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow Expression evaluation system. Expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated
- 9.8 Critical severity
Langflow: Improper Neutralization of Directives in Dynamically Evaluated Code
Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. Th
- 9.9 Critical severity
alchemy_cms: Improper Neutralization of Directives in Dynamically Evaluated Code
Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby `eval()` function to dynamically execute a string provided by the `resource_handler.engine_name` attribute in
- 9.9 Critical severity
N8n: Improper Control of Generation of Code
Using string formatting and exception handling, an attacker may bypass n8n's python-task-executor sandbox restrictions and run arbitrary unrestricted Python code in the underlying operating system. The vulnerability can be exploited via the Code block by an au
- 10.0 Critical severity
cosmos: Improper Neutralization of Directives in Dynamically Evaluated Code
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-
- 9.8 Critical severity
SXZOS: Improper Control of Generation of Code
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.
- 8.8 High severity
Ai-bolit: Improper Neutralization of Directives in Dynamically Evaluated Code
An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.
- 8.8 High severity
xwiki-rendering: Improper Control of Generation of Code
XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Versions 16.10.9 and below, 17.0.0-rc-1 through 17.4.2 and 17.5.0-rc-1 through 17.5.0 have insufficient prote
- 9.3 Critical severity
Wirtualna Uczelnia: Improper Neutralization of Directives in Dynamically Evaluated Code
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer t
- 8.0 High severity
open-webui: Improper Neutralization of Directives in Dynamically Evaluated Code
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbit
- 8.8 High severity
F5OS - Appliance: Improper Neutralization of Directives in Dynamically Evaluated Code
A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the attacker to cross a security boundary. Note: Software versions which have reached En
- 7.2 High severity
horilla: Improper Neutralization of Directives in Dynamically Evaluated Code
Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval() function on a user-controlled query parameter in the project_
- 9.8 Critical severity
xwiki-pro-macros: Improper Control of Generation of Code
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution for any u
- 9.8 Critical severity
xwiki-pro-macros: Improper Control of Generation of Code
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any us
- 8.7 High severity
application-blog: Improper Neutralization of Directives in Dynamically Evaluated Code
The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in use
- 8.1 High severity
Campus Directory – Faculty, Staff & Student…: Improper Neutralization of Directives in Dynamically Evaluated Code
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input b
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code execution vulnerability has been identified in the Robot Operating System (ROS) 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() function to process unsanitized, user-supplied in
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS top
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been discovered in the Robot Operating System (ROS) 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code injection vulnerability has been identified in the Robot Operating System (ROS) 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval() method to process user-supplied,
- 7.8 High severity
Robot Operating System (ROS): Improper Control of Generation of Code
A code execution vulnerability has been discovered in the Robot Operating System (ROS) 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval() function to process unsanitized, user-supplied p