CWE-1427

7 CVEs classified under CWE-1427. Browse by severity and year.

Top CVEs for CWE-1427
CVESeverityScorePublishedSummary
CVE-2026-75130Critical9.02026-08-18Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injec…
CVE-2026-18733High8.82026-08-03A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system…
CVE-2026-78379High8.12026-08-25Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execut…
CVE-2024-3303Medium6.42025-02-13An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prio…
CVE-2026-70331Medium5.42026-08-28Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21832Medium4.32026-08-13HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to user…
CVE-2025-367302025-10-14A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appende…
All CVEs classified under CWE-1427 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-70331Medium5.42026-08-28Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-78379High8.12026-08-25Improper neutralization of input used for LLM prompting in the python_repl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execut…
CVE-2026-75130Critical9.02026-08-18Context7 through 2.1.2 contains a prompt injection vulnerability that allows attackers to execute malicious instructions in connected AI coding agents by injec…
CVE-2026-21832Medium4.32026-08-13HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output. Injected markup may be displayed to user…
CVE-2026-18733High8.82026-08-03A prompt injection vulnerability in the shell tool in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to execute arbitrary operating system…
CVE-2025-367302025-10-14A prompt injection vulnerability exists in Windsurft version 1.10.7 in Write mode using SWE-1 model. It is possible to create a file name that will be appende…
CVE-2024-3303Medium6.42025-02-13An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prio…