{"id":"CVE-2026-108375","published":"2026-10-13T18:17:16.390","lastModified":"2026-10-16T16:00:33.533","description":"dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.get_field_default inserts schema-controlled string, UUID, bytes, and fixed field defaults into quoted literals in generated Python source without escaping them. A crafted default can terminate the literal and inject statements into the generated module, which execute when the module is imported. Version 0.70.6 fixes the vulnerability by escaping schema values rendered into generated string literals.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/marcosschroh/dataclasses-avroschema/commit/01e6d5e15ab0ff69faac39a340d21b85da1e852f","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2","tags":[]}],"exploitRefs":[{"url":"https://github.com/marcosschroh/dataclasses-avroschema/commit/01e6d5e15ab0ff69faac39a340d21b85da1e852f","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/releases/tag/0.70.6","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2","tags":[]},{"url":"https://github.com/marcosschroh/dataclasses-avroschema/security/advisories/GHSA-9h8h-264x-jcg2","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows attackers to inject arbitrary Python code into generated modules by manipulating default values in dataclasses-avroschema, potentially leading to remote code execution when the compromised modules are imported.","exploitability":"Exploitation requires crafting malicious default values that terminate string literals and inject executable statements, with no additional preconditions beyond having the vulnerable version installed.","blast_radius":"The impact could be significant across applications using dataclasses-avroschema for schema generation, especially those importing generated modules from untrusted sources.","remediation":"Upgrade to version 0.70.6 or later to fix the string escaping vulnerability in FieldRepresentation.get_field_default.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","code-injection","python","deserialization"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:50:09.230Z"}}