RCE in Lavague-Ai Lavague
CVE-2026-85694
LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute arbitrary code on the operator's host without review.
Vulnerability class: RCE (Remote Code Execution)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.009 (60.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 60th percentile — 60.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.009 · change: +0.004
Affected products
Weakness classification (CWE)
References
- github.com/lavague-ai/LaVague (product)
- github.com/lavague-ai/LaVague/blob/9024bb83/lavague-core/lavague/core/extractor… (technical-description)
- github.com/lavague-ai/LaVague/issues/650 (issue-tracking)
- www.vulncheck.com/advisories/lavague-0.2.35-remote-code-execution-via-eval-extr… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-85694?
- CVE-2026-85694 is a high-severity vulnerability in Lavague-Ai Lavague, classified under Code Injection. CVSS score: 8.1/10. Published 2026-09-04.
- How severe is CVE-2026-85694?
- High severity. CVSS v3 base score is 8.1 out of 10.