Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

FinRobot 1.0.0 could run malicious code through file creator

CVE-2026-51918 · published 16 days ago
Summary

FinRobot version 1.0.0 lets specially crafted input reach the create_file_with_code function and cause the system to execute unwanted code. This could let an attacker take control of the application or steal data. Apply the vendor's update or patch and limit file creation to trusted sources while validating all inputs.

Original advisory text
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published2 Oct 2026
Updated15 Oct 2026
First seen2 Oct 2026
Sources
CVE-2026-51918 · NVD
CVE-2026-51918 · MITRE
Track software like this
Free during beta