CWE-1427 · Injection and Smuggling
Improper Neutralization of Input Used for LLM Prompting
26CVEs
SortMost likely exploited
26 CVEs with CWE-1427 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-77931MoviePilot 3.1.5 Command Injection via ExecuteCommandTooljxxghp · MoviePilot · CVSS 8.8 · 2026-10-15 | 8.8 | 1.0% | 2026-10-15 |
| CVE-2026-18733Prompt injection bypasses shell tool consent gate in Strands Agents ToolsAWS · strands-agents-tools · CVSS 8.8 · 2026-08-03 | 8.8 | 0.8% | 2026-08-03 |
| CVE-2026-78379Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents ToolsAmazon · strands-agents-tools · CVSS 8.1 · 2026-08-25 | 8.1 | 0.7% | 2026-08-25 |
| CVE-2026-109440LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCodeginlix-ai · LangAlpha · CVSS 8.8 · 2026-10-20 | 8.8 | 0.6% | 2026-10-20 |
| CVE-2026-96893Improper Neutralization of Input Used for LLM Prompting in GitLabGitLab · GitLab · CVSS 7.3 · 2026-10-13 | 7.3 | 0.6% | 2026-10-13 |
| CVE-2026-114107HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunToolHKUDS · Vibe-Trading · CVSS 8.8 · 2026-10-21 | 8.8 | 0.6% | 2026-10-21 |
| CVE-2026-54140OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationtinyhumansai · openhuman · CVSS 8.3 · 2026-11-05 | 8.3 | 0.6% | 2026-11-05 |
| CVE-2026-54142OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvaltinyhumansai · openhuman · CVSS 8.7 · 2026-11-05 | 8.7 | 0.5% | 2026-11-05 |
| CVE-2026-44688In Eclipse Theia versions prior to 1.71.0, the AI chat agent processed workspace file and directory names as part of its prompt context without distinguishing them from system ins…Eclipse Foundation · Eclipse Theia · CVSS 8.4 · 2026-06-18 | 8.4 | 0.5% | 2026-06-18 |
| CVE-2026-75130Context7 2.1.2 Prompt Injection via Custom AI InstructionsUptash · Context7 · CVSS 9 · 2026-08-18 | 9.0 | 0.5% | 2026-08-18 |
| CVE-2026-70331Microsoft Edge for iOS Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.4 · 2026-08-28 | 5.4 | 0.4% | 2026-08-28 |
| CVE-2024-3303Improper Neutralization of Input Used for LLM Prompting in GitLabGitLab · GitLab · CVSS 6.4 · 2025-02-13 | 6.4 | 0.4% | 2025-02-13 |
| CVE-2026-126767OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat AssistantOpsTree Solutions · REMS · CVSS 4.3 · 2026-11-11 | 4.3 | 0.3% | 2026-11-11 |
| CVE-2026-115415Secret masking bypass in the environment tool in Strands Agents Toolsamazon · strands-agents-tools · CVSS 6.5 · 2026-10-28 | 6.5 | 0.3% | 2026-10-28 |
| CVE-2026-15077Improper Neutralization of Input Used for LLM Prompting in GitLabGitLab · GitLab · CVSS 4.3 · 2026-07-29 | 4.3 | 0.3% | 2026-07-29 |
| CVE-2026-21832HCL AION is affected by multiple security vulnerabilities.HCL Software · AION · CVSS 4.3 · 2026-08-13 | 4.3 | 0.3% | 2026-08-13 |
| CVE-2026-44246nnU-Net: Agentic workflow injection in `.github/workflows/issue-triage.yml` of `MIC-DKFZ/nnUNet`MIC-DKFZ · nnUNet · CVSS 7.2 · 2026-05-12 | 7.2 | 0.3% | 2026-05-12 |
| CVE-2026-4399Multiple vulnerabilities in 1millionbot Millie chatbot1millionbot · Millie chat · CVSS 8.7 · 2026-03-31 | 8.7 | 0.3% | 2026-03-31 |
| CVE-2025-64321Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.This issue affects…Salesforce · Agentforce Vibes Extension · CVSS 5.3 · 2025-11-04 | 5.3 | 0.2% | 2025-11-04 |
| CVE-2025-64318Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.This issue aff…Salesforce · Mulesoft Anypoint Code Builder · CVSS 5.3 · 2025-11-04 | 5.3 | 0.2% | 2025-11-04 |
| CVE-2025-64320Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.This issue affects Agentforce Vibes Extension:…Salesforce · Agentforce Vibes Extension · CVSS 6.5 · 2025-11-04 | 6.5 | 0.2% | 2025-11-04 |
| CVE-2026-123653esengine DeepSeek-Reasonix doc.go discoverDocs llm prompting inputesengine · DeepSeek-Reasonix · CVSS 6.3 · 2026-11-06 | 6.3 | 0.2% | 2026-11-06 |
| CVE-2025-10875Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.This issue affects Mulesoft Anypoint Code…Salesforce · Mulesoft Anypoint Code Builder · CVSS 6.5 · 2025-11-04 | 6.5 | 0.2% | 2025-11-04 |
| CVE-2025-36730Windsurf Prompt Injection via FilenameWindsurf · Windsurf · CVSS 4.6 · 2025-10-14 | 4.6 | 0.2% | 2025-10-14 |
| CVE-2026-123498Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadatago-vikunja · vikunja · CVSS 3.7 · 2026-11-08 | 3.7 | 0.2% | 2026-11-08 |
| CVE-2026-106020Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affec…Johnson Controls · EasyIO Neo IO Manager and Tools Installer · CVSS 8.6 · 2026-11-06 | 8.6 | 0.1% | 2026-11-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.