CVE Catalog

CVE-2026-51918

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

11th percentile - higher than 11% of all known CVEs

Summary

FinRobot 1.0.0 contains a code injection vulnerability in the CodingUtils.create_file_with_code() function.

Risk Assessment

The vulnerability may allow an attacker to execute arbitrary code in the application context, threatening system and data integrity.

Recommendation

It is recommended to update FinRobot to a patched version and to validate and sanitize input data passed to the create_file_with_code function.

Other vulnerabilities in FinRobot

Original NVD description (English source)

FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().

Vulnerability data from NVD (NIST) · CISA KEV · EPSS