CWE-1427 · 8 records

Improper Neutralization of Input Used for LLM Prompting

CVEs in this class

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2026-78379No exploit	Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Toolsamazon · strands-agents-tools · CWE-1427 pre-auth RCE	Critical9.2	—	0.5%	Aug 25, 2026
34Monitor	CVE-2026-77931No exploit	MoviePilot 3.1.5 Command Injection via ExecuteCommandTooljxxghp · moviepilot · CWE-1427 pre-auth RCE Command injection	High8.7	—	1.0%	1 day ago
30Monitor	CVE-2026-18733No exploit	Prompt injection bypasses shell tool consent gate in Strands Agents Toolsaws · strands-agents-tools · CWE-1427 pre-auth RCE	High7.5	—	0.5%	Aug 3, 2026
25Monitor	CVE-2026-75130No exploit	Context7 2.1.2 Prompt Injection via Custom AI Instructionsuptash · context7 · CWE-1427	Medium6.4	—	0.4%	Aug 18, 2026
22Monitor	CVE-2024-3303No exploit	Improper Neutralization of Input Used for LLM Prompting in GitLabgitlab · gitlab · CWE-1427	Medium5.7	—	0.3%	Feb 13, 2025
21Monitor	CVE-2026-70331No exploit	Microsoft Edge for iOS Spoofing Vulnerabilitymicrosoft · edge · CWE-1427 Pre-auth	Medium5.4	—	0.4%	Aug 28, 2026
18Monitor	CVE-2025-36730No exploit	Windsurf Prompt Injection via Filenamewindsurf · windsurf · CWE-1427	Medium4.6	—	0.1%	Oct 14, 2025
17Monitor	CVE-2026-21832No exploit	HCL AION is affected by multiple security vulnerabilities.hcl software · aion · CWE-1427	Medium4.3	—	0.2%	Aug 13, 2026

CVE-2026-78379
36Monitor
Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
amazon · strands-agents-toolsAug 25, 2026
CVE-2026-77931
34Monitor
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
HighCVSS 8.7No exploitEPSS 1%
- pre-auth RCE
- Command injection
jxxghp · moviepilot1 day ago
CVE-2026-18733
30Monitor
Prompt injection bypasses shell tool consent gate in Strands Agents Tools
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
aws · strands-agents-toolsAug 3, 2026
CVE-2026-75130
25Monitor
Context7 2.1.2 Prompt Injection via Custom AI Instructions
MediumCVSS 6.4No exploitEPSS 0%
uptash · context7Aug 18, 2026
CVE-2024-3303
22Monitor
Improper Neutralization of Input Used for LLM Prompting in GitLab
MediumCVSS 5.7No exploitEPSS 0%
gitlab · gitlabFeb 13, 2025
CVE-2026-70331
21Monitor
Microsoft Edge for iOS Spoofing Vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
microsoft · edgeAug 28, 2026
CVE-2025-36730
18Monitor
Windsurf Prompt Injection via Filename
MediumCVSS 4.6No exploitEPSS 0%
windsurf · windsurfOct 14, 2025
CVE-2026-21832
17Monitor
HCL AION is affected by multiple security vulnerabilities.
MediumCVSS 4.3No exploitEPSS 0%
hcl software · aionAug 13, 2026