{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","feed_url":"https://feed.craftedsignal.io/products/datamodel-code-generator--0.17.0--0.60.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["datamodel-code-generator (\u003e= 0.17.0, \u003c= 0.60.1)"],"_cs_severities":["high"],"_cs_tags":["code-injection","supply-chain","developer-tools","python","rce","cve"],"_cs_type":"advisory","_cs_vendors":["datamodel-code-generator"],"content_html":"\u003cp\u003e\u003ccode\u003edatamodel-code-generator\u003c/code\u003e versions 0.17.0 through 0.60.1 are affected by a high-severity code injection vulnerability (CVE-2026-54653) that allows for arbitrary Python code execution. This vulnerability arises when the tool generates Python models from an attacker-controlled JSON Schema, OpenAPI, YAML, JSON, Avro, Protobuf, or XSD schema. Specifically, if a property within the input schema contains a \u003ccode\u003e\u0026quot;default_factory\u0026quot;\u003c/code\u003e key, its value is interpolated verbatim as a raw Python expression into the generated \u003ccode\u003eField(default_factory=...)\u003c/code\u003e or \u003ccode\u003efield(default_factory=...)\u003c/code\u003e call. This code executes at class-definition time when the generated Python module is imported by a consumer. No special CLI flags are required for exploitation, making any developer or CI pipeline processing untrusted schemas susceptible. The fix involves validating \u003ccode\u003edefault_factory\u003c/code\u003e values to only accept \u003ccode\u003edict\u003c/code\u003e, \u003ccode\u003elist\u003c/code\u003e, and \u003ccode\u003eset\u003c/code\u003e.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAn attacker crafts a malicious schema (e.g., JSON Schema, OpenAPI, YAML) containing a \u003ccode\u003e\u0026quot;default_factory\u0026quot;\u003c/code\u003e key with arbitrary Python code as its value.\u003c/li\u003e\n\u003cli\u003eA victim developer or CI pipeline uses \u003ccode\u003edatamodel-code-generator\u003c/code\u003e (versions 0.17.0 through 0.60.1) to generate Python data models from this attacker-controlled schema.\u003c/li\u003e\n\u003cli\u003eDuring code generation, the \u003ccode\u003edatamodel-code-generator\u003c/code\u003e parser (e.g., \u003ccode\u003ejsonschema.py\u003c/code\u003e) identifies the \u003ccode\u003e\u0026quot;default_factory\u0026quot;\u003c/code\u003e key.\u003c/li\u003e\n\u003cli\u003eThe value associated with \u003ccode\u003e\u0026quot;default_factory\u0026quot;\u003c/code\u003e is retrieved from \u003ccode\u003eself.extras\u003c/code\u003e within the \u003ccode\u003eJsonSchemaObject\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003eWhen constructing the Python model (e.g., Pydantic v2, dataclass, msgspec), \u003ccode\u003edatamodel-code-generator\u003c/code\u003e interpolates the raw, unvalidated \u003ccode\u003edefault_factory\u003c/code\u003e value directly into the generated Python code without sanitization.\u003c/li\u003e\n\u003cli\u003eThe victim's Python application or environment imports the newly generated Python module.\u003c/li\u003e\n\u003cli\u003eUpon import, the interpolated malicious Python code embedded in the \u003ccode\u003edefault_factory\u003c/code\u003e argument is executed at class-definition time within the importing process, leading to arbitrary code execution.\u003c/li\u003e\n\u003cli\u003eThe attacker achieves their objective, such as filesystem reads (e.g., copying \u003ccode\u003e/etc/passwd\u003c/code\u003e), environment variable exfiltration, or secondary network calls.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThis vulnerability poses a significant supply chain risk to developers and CI pipelines. Any environment that uses \u003ccode\u003edatamodel-code-generator\u003c/code\u003e to process schemas not authored internally (e.g., third-party API specs, public schema registries, vendored files, remote introspection endpoints) is directly affected. Successful exploitation leads to arbitrary Python code execution within the importing process at module import time. This can result in data exfiltration, system compromise (e.g., filesystem read/write, network access), or further malicious activity on CI runners where build environments often have elevated privileges. While \u003ccode\u003etyping.TypedDict\u003c/code\u003e output models are not vulnerable, all other supported output model types, including Pydantic v2, dataclasses, and msgspec, are susceptible.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003edatamodel-code-generator\u003c/code\u003e to version \u003ccode\u003e0.60.2\u003c/code\u003e or later immediately to patch CVE-2026-54653.\u003c/li\u003e\n\u003cli\u003eReview CI/CD pipelines and developer workstations to ensure all instances of \u003ccode\u003edatamodel-code-generator\u003c/code\u003e are updated.\u003c/li\u003e\n\u003cli\u003eImplement controls to validate or restrict the source of schemas used for code generation, especially those from external or untrusted origins.\u003c/li\u003e\n\u003cli\u003eMonitor for unexpected process execution or file system modifications originating from Python processes that have recently imported newly generated data models, particularly if untrusted schemas are processed.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-07-28T21:54:03Z","date_published":"2026-07-28T21:54:03Z","id":"https://feed.craftedsignal.io/briefs/2026-07-datamodel-code-generator-rce/","summary":"The `datamodel-code-generator` library is vulnerable to code injection (CVE-2026-54653) when generating Python models from attacker-controlled schemas (e.g., JSON Schema, OpenAPI, YAML). This occurs because the `default_factory` schema field's value is interpolated directly as a raw Python expression into the generated code, allowing an attacker who controls the input schema to achieve arbitrary Python code execution within the consumer's process at module import time, affecting developers or CI pipelines that process untrusted schemas.","title":"`datamodel-code-generator` Vulnerable to Code Injection via `default_factory` Field","url":"https://feed.craftedsignal.io/briefs/2026-07-datamodel-code-generator-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Datamodel-Code-Generator (\u003e= 0.17.0, \u003c= 0.60.1)","version":"https://jsonfeed.org/version/1.1"}