CVE-2026-75062

critical · 9.2

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in the default lf.query Python protocol in Google langfun versions prior to 0.1.2 allows remote unauthenticated attackers to execute arbitrary Python code in the context of the host application via crafted prompt inputs that cause the model to generate executable Python expressions evaluated without a sandbox.

9.2

CVSS

0.4%

EPSS (exploit prob.)

28th

EPSS percentile

2026-08-26

Published

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-95CWE-1188

References

https://github.com/google/langfun
https://github.com/google/langfun/issues/725
https://github.com/google/langfun/issues/725

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-75062