CVE-2026-85694

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 5, 2026

Last Seen

September 5, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in LaVague 0.2.35 Disclosed57.8

A remote code execution vulnerability, CVE-2026-85694, has been identified in LaVague version 0.2.35. The flaw exists in the PythonFromMarkdownExtractor.extract_as_object function, allowing unauthenticated attackers to inject malicious Python code via web pages using indirect prompt injection. This...