CVE-2026-85694CWE-94code-injection

CVE-2026-85694

High · published September 4, 2026

CVSS v3.1
8.1
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute arbitrary code on the operator's host without review.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00942 · 60.6th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2026-09-04T19:17Z
References (5)
https://github.com/lavague-ai/LaVague · [email protected]https://github.com/lavague-ai/LaVague/blob/9024bb83/lavague-core/lavague/core/extractors.py · [email protected]https://github.com/lavague-ai/LaVague/issues/650 · [email protected]https://www.vulncheck.com/advisories/lavague-0.2.35-remote-code-execution-via-eval-extraction · [email protected]https://github.com/lavague-ai/LaVague/issues/650 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 06 SEP 03:33Z
    EPSS moved — → 1%
    epss
  • 04 SEP 14:32Z
    LaVague 0.2.35 Remote Code Execution via eval extraction
    cvelistv5