CVE-2026-96795

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes the generated function definition to exec(). A crafted string that remains valid under ast.literal_eval can inject Python syntax into a default argument evaluated during function definition, allowing arbitrary operating-system commands to execute with the application process privileges, including root privileges in the shipped Docker image. This issue is fixed in version 2.0.0.

• CWE-94

• https://github.com/horilla/horilla-hr/releases/tag/2.0.0
• https://github.com/horilla/horilla-hr/security/advisories/GHSA-5g4v-4rv4-r26f

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-96773A weakness has been identified in Intelliants Subrion CMS up…4.3
• CVE-2026-96774A vulnerability was found in SPON Communications IP Network …5.3
• CVE-2026-96775MLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_A…8.8
• CVE-2026-96777A vulnerability was determined in Forma LMS up to 4.1.43. Th…6.3
• CVE-2026-9678Impact: Undici's cache interceptor incorrectly classifies so…5.9
• CVE-2026-9679Impact: undici's cookie parser in parseSetCookie percent-dec…5.9
• CVE-2026-9680Improper exposure of the MCP server in alibabacloud-rds-open…5.8
• CVE-2026-96803A vulnerability was identified in java110 MicroCommunity up …7.3
• CVE-2026-96804MLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits …8.8
• CVE-2026-96807In Flatpak before 1.18.1, a malicious sandboxed app can repl…4
• CVE-2026-96808In Flatpak before 1.18.1, the revokefs writer, used by the f…7.4
• CVE-2026-96810A vulnerability was identified in huanzi-qch base-admin up t…3.5