Which versions of Bagofwords are affected by CVE-2026-4500?

Organizations using bagofwords1 bagofwords should be aware of moderate risk from CVE-2026-4500, a injection vulnerability rated CVSS 6.3.. A patch is available.

Is there a public PoC exploit available for CVE-2026-4500?

Yes, a public proof-of-concept exploit is available for CVE-2026-4500. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-4500?

Within 30 days: Identify affected systems running bagofwords1 bagofwords and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Bagofwords CVE-2026-4500

Q: What is the CVSS score of CVE-2026-4500?

CVE-2026-4500 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-13802 LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2026-03-20 VulDB

Code Injection Bagofwords

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

CVSS changed

Apr 22, 2026 - 21:37 NVD

6.3 (MEDIUM) 5.3 (MEDIUM)

PoC Detected

Mar 23, 2026 - 14:32 vuln.today

Public exploit code

EUVD ID Assigned

Mar 20, 2026 - 19:46 euvd

EUVD-2026-13802

Analysis Generated

Mar 20, 2026 - 19:46 vuln.today

Patch released

Mar 20, 2026 - 19:46 nvd

Patch available

CVE Published

Mar 20, 2026 - 19:32 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generate_df of the file backend/app/ai/code_execution/code_execution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 0.0.298 will fix this issue. The name of the patch is 47b20bcda31264635faff7f6b1c8095abe1861c6. It is recommended to upgrade the affected component.

AnalysisAI

A code injection vulnerability exists in bagofwords (versions up to 0.0.297) within the generate_df function of backend/app/ai/code_execution/code_execution.py, allowing remote attackers with low privileges to inject and execute arbitrary code. The vulnerability (CWE-74: Improper Neutralization of Special Elements in Output) has a CVSS score of 6.3 (Medium) with network-based attack vector and low attack complexity, meaning exploitation requires only basic authentication and no user interaction. A public proof-of-concept exploit is already available, making this a practical threat requiring prompt remediation.

Technical ContextAI

The vulnerability resides in bagofwords (affected CPE: cpe:2.3:a:bagofwords1:bagofwords:*:*:*:*:*:*:*:*), specifically in the code execution module at backend/app/ai/code_execution/code_execution.py. The root cause is classified under CWE-74 (Improper Neutralization of Special Elements in Output), which occurs when user-supplied input is passed unsanitized to dynamic code execution contexts. The generate_df function appears to construct and execute code without proper input validation or parameterization, creating a direct pathway for code injection attacks. This is particularly critical because the vulnerable function operates within a code execution pipeline, meaning injected payloads are processed with the privileges of the application runtime.

RemediationAI

Immediately upgrade bagofwords to version 0.0.298 or later, which contains the definitive security patch (commit 47b20bcda31264635faff7f6b1c8095abe1861c6). The patched version is available at https://github.com/bagofwords1/bagofwords/releases/tag/v0.0.298 and via the official GitHub repository at https://github.com/bagofwords1/bagofwords. Until patching is completed, implement compensating controls by restricting network access to the affected code execution endpoints to trusted internal networks only, enforce strict authentication and session management to limit PR:L access, and monitor logs for suspicious patterns in requests to backend/app/ai/code_execution endpoints. If immediate patching is not possible, consider disabling the generate_df function or the entire code execution module until the upgrade can be performed.