P4Verified

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code.

CVE-2026-51917. CVSS base score 7.3 (HIGH, Source advisory). EPSS 0.00213 (percentile 0.10486), scored 2026-10-04.

Published 2026-10-05 23:10:31.033103+00:00

CVE: CVE-2026-51917
CWE: CWE-94
CCR priority: 29.3 /100 (P4)
CVSS: 7.3 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · Source advisory
EPSS: 0.00213 · percentile 0.10486 · 2026-10-04
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-05 23:09:08.830529+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-05 23:10:51.172112+00:00 UTC