CVE-2026-4500

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4500", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-20T12:38:08.859Z", "datePublished": "2026-03-20T19:32:33.452Z", "dateUpdated": "2026-03-24T19:30:36.410Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-20T19:32:33.452Z"}, "title": "bagofwords1 bagofwords code_execution.py generate_df injection", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "Injection"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-707", "lang": "en", "description": "Improper Neutralization"}]}], "affected": [{"vendor": "bagofwords1", "product": "bagofwords", "versions": [{"version": "0.0.297", "status": "affected"}, {"version": "0.0.298", "status": "unaffected"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_execution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 0.0.298 will fix this issue. The name of the patch is 47b20bcda31264635faff7f6b1c8095abe1861c6. It is recommended to upgrade the affected component."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-20T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-20T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-20T13:43:34.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Goku (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.352065", "name": "VDB-352065 | bagofwords1 bagofwords code_execution.py generate_df injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.352065", "name": "VDB-352065 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.773890", "name": "Submit #773890 | https://bagofwords.com/ bagofwords <=0.0.297 Remote command execution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/bagofwords1/bagofwords/issues/60", "tags": ["issue-tracking"]}, {"url": "https://github.com/bagofwords1/bagofwords/pull/63", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/Ka7arotto/cve/blob/main/bagofwords-rce.md", "tags": ["exploit"]}, {"url": "https://github.com/bagofwords1/bagofwords/commit/47b20bcda31264635faff7f6b1c8095abe1861c6", "tags": ["patch"]}, {"url": "https://github.com/bagofwords1/bagofwords/releases/tag/v0.0.298", "tags": ["patch"]}, {"url": "https://github.com/bagofwords1/bagofwords/", "tags": ["product"]}], "tags": ["x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-24T19:18:35.299834Z", "id": "CVE-2026-4500", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T19:30:36.410Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4500", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-24T19:18:35.299834Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T19:30:27.592Z"}}], "cna": {"tags": ["x_open-source"], "title": "bagofwords1 bagofwords code_execution.py generate_df injection", "credits": [{"lang": "en", "type": "reporter", "value": "Goku (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 6.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 6.5, "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "bagofwords1", "product": "bagofwords", "versions": [{"status": "affected", "version": "0.0.297"}, {"status": "unaffected", "version": "0.0.298"}]}], "timeline": [{"lang": "en", "time": "2026-03-20T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-20T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-20T13:43:34.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.352065", "name": "VDB-352065 | bagofwords1 bagofwords code_execution.py generate_df injection", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.352065", "name": "VDB-352065 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.773890", "name": "Submit #773890 | https://bagofwords.com/ bagofwords <=0.0.297 Remote command execution", "tags": ["third-party-advisory"]}, {"url": "https://github.com/bagofwords1/bagofwords/issues/60", "tags": ["issue-tracking"]}, {"url": "https://github.com/bagofwords1/bagofwords/pull/63", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/Ka7arotto/cve/blob/main/bagofwords-rce.md", "tags": ["exploit"]}, {"url": "https://github.com/bagofwords1/bagofwords/commit/47b20bcda31264635faff7f6b1c8095abe1861c6", "tags": ["patch"]}, {"url": "https://github.com/bagofwords1/bagofwords/releases/tag/v0.0.298", "tags": ["patch"]}, {"url": "https://github.com/bagofwords1/bagofwords/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_execution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 0.0.298 will fix this issue. The name of the patch is 47b20bcda31264635faff7f6b1c8095abe1861c6. It is recommended to upgrade the affected component."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "Injection"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-707", "description": "Improper Neutralization"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-20T19:32:33.452Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4500", "state": "PUBLISHED", "dateUpdated": "2026-03-24T19:30:36.410Z", "dateReserved": "2026-03-20T12:38:08.859Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-20T19:32:33.452Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "bagofwords", "vendor": "bagofwords1", "versions": [{"status": "affected", "version": "0.0.297"}, {"status": "unaffected", "version": "0.0.298"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_execution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 0.0.298 will fix this issue. The name of the patch is 47b20bcda31264635faff7f6b1c8095abe1861c6. It is recommended to upgrade the affected component."}, {"lang": "es", "value": "Una vulnerabilidad fue identificada en bagofwords1 bagofwords hasta la versi\u00f3n 0.0.297. Esto afecta la funci\u00f3n generate_df del archivo backend/app/ai/code_execution/code_execution.py. Dicha manipulaci\u00f3n conduce a inyecci\u00f3n. El ataque puede ser lanzado remotamente. El exploit est\u00e1 disponible p\u00fablicamente y podr\u00eda ser utilizado. Actualizar a la versi\u00f3n 0.0.298 solucionar\u00e1 este problema. El nombre del parche es 47b20bcda31264635faff7f6b1c8095abe1861c6. Se recomienda actualizar el componente afectado."}], "id": "CVE-2026-4500", "lastModified": "2026-06-17T10:56:42.727", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 2.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4500", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-24T19:18:35.299834Z", "version": "2.0.3"}}]}, "published": "2026-03-20T20:16:50.450", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/Ka7arotto/cve/blob/main/bagofwords-rce.md"}, {"source": "cna@vuldb.com", "url": "https://github.com/bagofwords1/bagofwords/"}, {"source": "cna@vuldb.com", "url": "https://github.com/bagofwords1/bagofwords/commit/47b20bcda31264635faff7f6b1c8095abe1861c6"}, {"source": "cna@vuldb.com", "url": "https://github.com/bagofwords1/bagofwords/issues/60"}, {"source": "cna@vuldb.com", "url": "https://github.com/bagofwords1/bagofwords/pull/63"}, {"source": "cna@vuldb.com", "url": "https://github.com/bagofwords1/bagofwords/releases/tag/v0.0.298"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.352065"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.352065"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.773890"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}, {"lang": "en", "value": "CWE-707"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.0.297"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "0.0.298"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "bagofwords", "source": "cna", "vendor": "bagofwords1"}, "product": "bagofwords", "vendor": "bagofwords1"}], "analysis": {"en": {"generated_at": "2026-03-20T20:20:17.924542+00:00", "value": {"mitigation_remediation": ["Upgrade bagofwords1 bagofwords to version 0.0.298 or later to apply the security patch."], "summary": {"action": "Apply patch", "impact": "Remote code execution"}, "threat_synthesis": {"affected_systems": "bagofwords1 bagofwords versions up to and including 0.0.297 are affected. Updating to version 0.0.298, which contains the referenced patch with commit hash 47b20bcda31264635faff7f6b1c8095abe1861c6, resolves the issue.", "description_and_impact": "An injection flaw in the generate_df function of bagofwords1 bagofwords permits attackers to inject data that is processed by the backend, allowing remote execution of arbitrary code. The flaw aligns with CWE-74 for input injection and CWE-707 for unsafe handling of user-provided data. Because the exploit is publicly available and can be triggered over the network, an attacker can compromise the entire application if they gain access to the remote interface. The vulnerability can lead to loss of confidentiality and integrity of application data, as well as denial of service if the injected content disrupts normal function.", "risk_and_exploitability": "The CVSS score of 5.3 indicates moderate severity, and the EPSS score is not available, which does not allow precise quantification of exploitation probability. The vulnerability is not listed in the CISA KEV catalog, but the publicly available exploit and remote attack surface increase the practical risk. Exploitation requires network access to the application and the ability to supply crafted input through the generate_df endpoint, making it a remote exploitation vector."}}}}, "created": "2026-03-23T09:52:56.260688+00:00", "title": "Remote code injection via generate_df in bagofwords", "updated": "2026-03-25T14:34:51.405642+00:00", "vendors": ["bagofwords1", "bagofwords1$PRODUCT$bagofwords"]}