OS Command Injection in Frictionless Data Package Explorer

Frictionless Framework, a data processing and validation library, is susceptible to an OS command injection vulnerability identified as CVE-2026-93349. This flaw exists within the "explore" console command, which is used to inspect Data Packages. An attacker can craft a malicious datapackage.json descriptor file containing shell metacharacters within the resource path values.

When a user executes the frictionless explore command against this untrusted descriptor, the application passes the unsanitized path values to the os.system function. This results in the execution of arbitrary commands with the privileges of the user who initiated the explore process. This vulnerability affects all versions of Frictionless up to and including 5.20.0rc1 and represents a significant risk to data scientists and developers who may pull and inspect untrusted data packages from external repositories.

Impact

Successful exploitation allows for arbitrary code execution in the context of the user running the Frictionless CLI. This could lead to full system compromise, data exfiltration, or the installation of persistent malicious software on the host machine. The vulnerability impacts any environment where users utilize the Frictionless framework to analyze or validate externally sourced Data Packages.

Recommendation

• Upgrade to a version of Frictionless released after 5.20.0rc1 that addresses CVE-2026-93349.
• Avoid using the frictionless explore command on untrusted or unknown datapackage.json files until the software is patched.
• Audit environments where the Frictionless CLI is utilized to determine exposure and ensure users are aware of the risks associated with processing untrusted package descriptors.