cve.bz

CWE-829: Inclusion of Functionality from Untrusted Control Sphere

Filter

The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

What the weakness is: CWE-829 at MITRE

Related attack patterns (CAPEC): 13
  • CAPEC-175 Code Inclusion Likelihood: Medium · Severity: Very High
  • CAPEC-201 Serialized Data External Linking Likelihood: High · Severity: High
  • CAPEC-228 DTD Injection Severity: Medium
  • CAPEC-251 Local Code Inclusion Severity: Medium
  • CAPEC-252 PHP Local File Inclusion Severity: Medium
  • CAPEC-253 Remote Code Inclusion
  • CAPEC-263 Force Use of Corrupted Files Severity: Medium
  • CAPEC-538 Open-Source Library Manipulation Likelihood: Low · Severity: High
  • CAPEC-549 Local Execution of Code Likelihood: Medium · Severity: High
  • CAPEC-640 Inclusion of Code in Existing Process Likelihood: Low · Severity: High
  • CAPEC-660 Root/Jailbreak Detection Evasion via Hooking Likelihood: Medium · Severity: Very High
  • CAPEC-695 Repo Jacking Likelihood: Medium · Severity: High
  • CAPEC-698 Install Malicious Extension Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-829, as MITRE names them. Credits.

Ask an AI about CWE-829

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-829: Inclusion of Functionality from Untrusted Control Sphere and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/829.html and https://cve.bz/cve/cwe/829?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.1CVE-2026-95649

    IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execut…

  2. 7.1CVE-2026-63184EPSS 0.4%

    Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet tool invokes `NJsonSchema` with unsafe defaults for `$ref` resolution when generating Refit interfaces and contracts from…

  3. 9.3CVE-2026-118762EPSS 0.3%

    Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependen…

  4. 8.6CVE-2023-7357EPSS 0.4%

    A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vulnerability is addressed in the FlexNet Publisher 2023 R2 (11.19.4.0) release.

  5. 7.4CVE-2026-15564EPSS 0.1%

    Wildfly's IIOP listener may permit deserialization of input streams before authentication is performed. An attacker who can gain access to the IIOP port may be able to construct and send malicious objects and achieve deserialization, if th…

  6. 7.4CVE-2026-114488EPSS 0.3%

    A flaw was found in Wildfly. A remote attacker can bypass authentication on IIOP EJB invocations as the CSIv2 security interceptor accepts ITTPrincipalName identity assertions in the service context without verifying transport-level authen…

  7. 8.1CVE-2026-84725EPSS 0.3%

    when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in t…

  8. 7.8CVE-2026-59176EPSS 0.2%

    Functype is a family of TypeScript functional programming libraries. Prior to 1.4.4, the `set_functype_version` MCP tool in `functype-mcp-server` accepts an unconstrained `version` string using only `z.string()` validation in `packages/mcp…

  9. 7.8CVE-2026-59172EPSS 0.2%

    Joker is a small Clojure interpreter, linter and formatter written in Go. Prior to 1.8.2, `joker --lint <file>` walks upward from the linted file to locate a `.jokerd/` directory and executes matching `linter.*` files before linting. Those…

  10. 8.4CVE-2026-65119EPSS 0.2%

    NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code execu…

  11. 8.7CVE-2026-116843EPSS 0.4%

    Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies …

  12. 2.1CVE-2026-115802EPSS 0.3%

    A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path cause…

  13. 6.9CVE-2026-54532EPSS 0.2%

    CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A pull_request_target workflow checks out fork code using git…

  14. 8.3CVE-2026-114727EPSS 0.3%

    Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types for contact photo upload and conversion, and both formats can re…

  15. 5.2CVE-2026-113461EPSS 0.1%

    Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent ha…

  16. 9.9CVE-2026-113709EPSS 0.5%

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kustomize build, helmGlobals.configHome can point Helm's config…

  17. 8.8CVE-2026-86949EPSS 0.2%

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox.

  18. 8.8CVE-2026-86948EPSS 0.1%

    This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox.

  19. 7.0CVE-2026-111357KEVEPSS 0.5%

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026.

  20. 7.8CVE-2026-111091EPSS 0.1%

    In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration

  21. 8.8CVE-2026-73800EPSS 0.5%

    Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author can modify a referenced reusable workflow so attacker-controlled code executes w…

  22. 7.5CVE-2026-96237EPSS 0.6%

    Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network.

  23. 7.8CVE-2026-87695EPSS 0.3%

    Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  24. 7.5CVE-2026-86063EPSS 0.2%

    Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verifying that the resulting HEAD equals the pinned 40-character…

  25. 7.0CVE-2026-85355EPSS 0.3%

    Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  26. 7.2CVE-2026-70267EPSS 1.0%

    Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

  27. 10.0CVE-2026-55675EPSS 0.4%

    The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, …

  28. 7.1CVE-2026-108913EPSS 0.4%

    omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable content from an untrusted Git repository.

  29. 7.8CVE-2026-92705EPSS 0.1%

    Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subtitle projects without asking whether the user trusts the scr…

  30. 8.8CVE-2026-78019EPSS 0.3%

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this…

  31. 5.2CVE-2026-105331EPSS 0.08%

    Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their privileges if an agent has this plugin enabled.

  32. 7.8CVE-2026-105745EPSS 0.1%

    Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories in docling/models/factories/base_factory.py call load_setupt…

  33. 7.2CVE-2026-105677EPSS 0.5%

    Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute arbitrary code on the server via a crafted theme. This iss…

  34. 8.4CVE-2026-12171EPSS 0.2%

    auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and honors security-sensitive options from that untrusted source. Th…

  35. 8.5CVE-2026-63277EPSS 0.3%

    LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded from a remote location, so opening the document could run J…

  36. 8.4CVE-2026-104811EPSS 0.2%

    DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to exploit this vulnerability. The specific flaw exists wit…

  37. 8.4CVE-2026-104809EPSS 0.10%

    DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without a…

  38. 9.4CVE-2026-105080EPSS 0.4%

    In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.

  39. 6.5CVE-2026-55251EPSS 0.1%

    NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pull_request and executes code supplied by th…

  40. 9.8CVE-2026-104056EPSS 0.2%

    Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery response to replace all endpoint values with attacker-controlled…

  41. 7.8CVE-2026-100256EPSS 0.1%

    In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects

  42. 8.6CVE-2026-97150EPSS 0.3%

    When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the system may be read or deleted by an administra…

  43. 9.2CVE-2026-86131EPSS 0.5%

    A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox.

  44. 7.1CVE-2026-87114EPSS 0.4%

    A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote att…

  45. 8.2CVE-2026-54160EPSS 0.2%

    Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to commits 658b24e and 1aa31d1, the GitHub Actions script used to prepare NUT tarballs and upd…

  46. 8.6CVE-2026-95985EPSS 0.1%

    The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remote unauthenticated actors to inject crafted instructions into the agent's context. When a user runs the agent in a crafted repository as an untrusted workspace,…

  47. 6.5CVE-2026-96443EPSS 0.4%

    Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE.

  48. 8.8CVE-2026-17647EPSS 0.2%

    IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to execute arbitrary commands due to the inclusion of functionality from an untrusted control sphere.

  49. 7.5CVE-2026-96269EPSS 0.1%

    GNU Emacs 28.1 through 31.1 allows arbitrary code execution upon opening a file, because an untrusted value of read-symbol-shorthands affects the intern and unintern functions. This affects the default configuration; no particular user set…

  50. 2.5CVE-2026-49449EPSS 0.2%

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. From 1.4.0 until 3.7.2, packages/renderer/MdToHtml/rules/katex.ts enables KaTeX's trust option for note content, allowing a note auth…