Read the docs

lavague-ai

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

lavague-ai records in CISA KEV

No lavague-ai vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-58805 CVE-2026-85694 · GHSA-gvgx-3mw6-m592

LaVague 0.2.35 Remote Code Execution via eval extraction

Priority HIGH 75

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00942 Published 2026-09-04 No fix listed CWE-94
Open these records in search →