CVE-2026-108376— dataclasses-avroschema allows code injection through record names in generated default factories
Quick assessment
Affected
marcosschroh dataclasses-avroschema
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
dataclasses-avroschema 能够从 Python 数据类（dataclasses）、Pydantic 模型和 Faust 记录（Records）生成 Avro 模式，并能够从 Avro 模式生成 Python 代码。在版本 0.38.0 至 0.70.5 中， 方法在对字段默认值应用大小写转换后，将其渲染为枚举成员引用，但未验证该引用是否为合法的标识符。攻击者可以通过插入换行符、运算符和标点符号，逃逸出预期的枚举引用上下文，从而在生成的 Python 模块中注入受限语句，导致命名空间被修改或使模块
Possible ATT&CK Techniques 1 AI
T1195 · Supply Chain CompromiseAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| marcosschroh | dataclasses-avroschema | >= 0.47.3, < 0.70.6 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108376
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
dataclasses-avroschema allows code injection through record names in generated default factories
Source: CVE Program / CVE List V5
Vulnerability Description
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0.70.5, FieldRepresentation.get_field_default inserts a schema-controlled referenced record name into the callable position of a generated default_factory lambda without validating it as an Avro name. A crafted record name can become an arbitrary Python expression that executes when an instance of the generated model consumes the field default. Version 0.70.6 fixes the vulnerability by rejecting record names that do not match the Avro name grammar.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| marcosschroh | dataclasses-avroschema | >= 0.47.3, < 0.70.6 | - |
|
II. Public POCs for CVE-2026-108376
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108376
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-108376 (1)
Vendor Pages for CVE-2026-108376 (1)
-
🔗 Release 0.70.6 · marcosschroh/dataclasses-avroschema · GitHub x_refsource_MISC
Same Patch Batch · marcosschroh · 2026-10-13 · 11 CVEs total
| CVE-2026-108375 | 8.8 HIGH | dataclasses-avroschema allows code injection through generated field-default literals |
| CVE-2026-108377 | 8.8 HIGH | dataclasses-avroschema allows code injection through generated Meta.schema_name |
| CVE-2026-108380 | 8.8 HIGH | dataclasses-avroschema field documentation allows code injection in generated Pydantic des |
| CVE-2026-108378 | 8.8 HIGH | dataclasses-avroschema record documentation can terminate generated class docstrings |
| CVE-2026-108381 | 8.8 HIGH | dataclasses-avroschema pydantic-class metadata allows code injection in generated annotati |
| CVE-2026-108379 | 8.8 HIGH | dataclasses-avroschema fixed namespaces allow code injection in generated annotations |
| CVE-2026-108382 | 8.8 HIGH | dataclasses-avroschema allows code injection through generated enum-symbol string literals |
| CVE-2026-108383 | 8.8 HIGH | dataclasses-avroschema enum field defaults can inject statements into generated modules |
| CVE-2026-108385 | 8.8 HIGH | dataclasses-avroschema enum symbols can inject statements through generated member names |
| CVE-2026-108384 | 8.8 HIGH | dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare |
IV. Related Vulnerabilities
Same product: dataclasses-avroschema
-
CVE-2026-108385
dataclasses-avroschema enum symbols can inject statements th -
CVE-2026-108384
dataclasses-avroschema allows code injection through fixed-t -
CVE-2026-108383
dataclasses-avroschema enum field defaults can inject statem -
CVE-2026-108382
dataclasses-avroschema allows code injection through generat -
CVE-2026-108381
dataclasses-avroschema pydantic-class metadata allows code i
Same vendor: marcosschroh
-
CVE-2026-108385
dataclasses-avroschema enum symbols can inject statements th -
CVE-2026-108384
dataclasses-avroschema allows code injection through fixed-t -
CVE-2026-108383
dataclasses-avroschema enum field defaults can inject statem -
CVE-2026-108382
dataclasses-avroschema allows code injection through generat -
CVE-2026-108381
dataclasses-avroschema pydantic-class metadata allows code i
Same weakness: CWE-94
-
CVE-2026-54566
Markdown Preview Enhanced: Remote Code Execution via VM Sand -
CVE-2026-85714
Stirling-PDF: Remote Code Execution via H2 -
CVE-2026-108151
WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vu -
CVE-2026-103081
WordPress Salevo plugin <= 1.3.0 - Content Injection vulnera -
CVE-2026-0322
PAN-OS: Authenticated Remote Code Execution (RCE) in the Man
V. Comments for CVE-2026-108376
No comments yet