Is there a public PoC exploit available for CVE-2026-5532?

Yes, a public proof-of-concept exploit is available for CVE-2026-5532. Prioritise patching immediately. EPSS: 0.5%.

Scrapegraph Ai CVE-2026-5532

Q: What is the CVSS score of CVE-2026-5532?

CVE-2026-5532 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-19014 LOW

OS Command Injection (CWE-78)

2026-04-05 VulDB

Command Injection Scrapegraph Ai

2.1

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 07, 2026 - 13:20 vuln.today

Public exploit code

EUVD ID Assigned

Apr 05, 2026 - 01:45 euvd

EUVD-2026-19014

Analysis Generated

Apr 05, 2026 - 01:45 vuln.today

CVE Published

Apr 05, 2026 - 01:15 nvd

MEDIUM 5.3

DescriptionCVE.org

A vulnerability was found in ScrapeGraphAI scrapegraph-ai up to 1.74.0. The affected element is the function create_sandbox_and_execute of the file scrapegraphai/nodes/generate_code_node.py of the component GenerateCodeNode Component. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote code execution in ScrapeGraphAI scrapegraph-ai up to version 1.74.0 allows unauthenticated remote attackers to inject arbitrary operating system commands via the create_sandbox_and_execute function in GenerateCodeNode Component, with publicly available exploit code and vendor non-response confirming active real-world risk.

Technical ContextAI

The vulnerability exists in the GenerateCodeNode Component's create_sandbox_and_execute function within scrapegraphai/nodes/generate_code_node.py. The root cause is classified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command), indicating that user-supplied input is not properly sanitized before being passed to OS command execution routines. ScrapeGraphAI is a library for web scraping using graph-based techniques, and the vulnerable function appears to handle sandbox creation and code execution logic. The attack surface is accessible via network (AV:N) with low attack complexity (AC:L) and does not require user privileges (PR:N), though it does require user interaction (UI:R), suggesting the attacker must trick a user into performing an action that triggers the malicious payload.

RemediationAI

Upgrade ScrapeGraphAI scrapegraph-ai to a version released after 1.74.0 that addresses the os command injection in the GenerateCodeNode Component's create_sandbox_and_execute function. As a vendor-released patch version is not independently confirmed from available data, users should monitor the official ScrapeGraphAI repository (https://github.com/August829/CVEP/issues/19 documents the POC) for a patched release or interim guidance. In the interim, restrict execution of the GenerateCodeNode Component to trusted input sources, implement input validation and sanitization at the application level, avoid passing user-controlled data directly to the create_sandbox_and_execute function without verification, and consider isolating ScrapeGraphAI instances in sandboxed or containerized environments to limit OS command injection impact.