CVE-2026-54654— `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
Possible ATT&CK Techniques 1AI
T1195.002 · Compromise Software Supply ChainAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| koxudaxi | datamodel-code-generator | >= 0.14.1, < 0.60.2 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-54654
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
Source: CVE Program / CVE List V5
Vulnerability Description
datamodel-code-generator generates Python data models from schema definitions. From 0.14.1 until 0.60.2, the --extra-template-data comment field is rendered into Python comments in src/datamodel_code_generator/model/template/TypeAliasAnnotation.jinja2, src/datamodel_code_generator/model/template/TypedDict.jinja2, src/datamodel_code_generator/model/template/dataclass.jinja2, src/datamodel_code_generator/model/template/msgspec.Struct.jinja2, src/datamodel_code_generator/model/template/pydantic/BaseModel.jinja2, and src/datamodel_code_generator/model/template/pydantic_v2/BaseModel.jinja2 without neutralizing carriage returns in Python # comments, allowing an attacker-controlled comment value to inject Python code into generated models that runs when imported. This issue is fixed in version 0.60.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Koudai Aono datamodel-code-generator 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Koudai Aono datamodel-code-generator是日本Koudai Aono个人开发者的一款数据模型代码生成器。 Koudai Aono datamodel-code-generator 0.14.1版本至0.60.2之前版本存在代码注入漏洞，该漏洞源于--extra-template-data注释字段未中和回车符，允许攻击者通过控制注释值注入Python代码，这些代码在导入时运行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| koxudaxi | datamodel-code-generator | >= 0.14.1, < 0.60.2 | - |
II. Public POCs for CVE-2026-54654
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
Qwen3.6-35B-A3B · 5978 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-54654
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-54654 (1)
Vendor Advisories for CVE-2026-54654 (1)
Vendor Pages for CVE-2026-54654 (1)
Same Patch Batch · koxudaxi · 2026-07-28 · 12 CVEs total
| CVE-2026-54653 | 8.8 HIGH | `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `defaul |
| CVE-2026-54691 | 8.2 HIGH | datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redi |
| CVE-2026-54690 | 8.2 HIGH | datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by |
| CVE-2026-54621 | 7.8 HIGH | `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in G |
| CVE-2026-54655 | 7.8 HIGH | `datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON |
| CVE-2026-54656 | 7.8 HIGH | `datamodel-code-generator` vulnerable to code execution on import via unescaped `validator |
| CVE-2026-55390 | 7.5 HIGH | Arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path travers |
| CVE-2026-55391 | 7.5 HIGH | datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding |
| CVE-2026-55389 | 7.5 HIGH | datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (` |
| CVE-2026-55415 | 7.5 HIGH | datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypeP |
| CVE-2026-55403 | 3.7 LOW | datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect |
IV. Related Vulnerabilities
Same product: datamodel-code-generator
- CVE-2026-55389
datamodel-code-generator vulnerable to arbitrary local file - CVE-2026-54653
`datamodel-code-generator` vulnerable to code injection in v - CVE-2026-55391
datamodel-code-generator vulnerable to SSRF protection bypas - CVE-2026-54656
`datamodel-code-generator` vulnerable to code execution on i - CVE-2026-54690
datamodel-code-generator vulnerable to SSRF via JSON-Schema
Same vendor: koxudaxi
- CVE-2026-55389
datamodel-code-generator vulnerable to arbitrary local file - CVE-2026-54653
`datamodel-code-generator` vulnerable to code injection in v - CVE-2026-55391
datamodel-code-generator vulnerable to SSRF protection bypas - CVE-2026-54656
`datamodel-code-generator` vulnerable to code execution on i - CVE-2026-54690
datamodel-code-generator vulnerable to SSRF via JSON-Schema
Same weakness: CWE-94
- CVE-2026-19980
GL.iNet XE3000 Language Update ui.update_langs code injectio - CVE-2026-19964
Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.ru - CVE-2026-19958
iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode cod - CVE-2026-17581
WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injecti - CVE-2026-18385
Paid Membership Plugin, Ecommerce, User Registration Form, L
V. Comments for CVE-2026-54654
No comments yet