PT-2026-117305

CVE-2026-112102

Published

2026-10-19

Updated

2026-10-19

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AXA Group NLP.js version 4.27.0

Description Code injection is possible via remote attack within the Condition Expression Pipeline component. The issue exists in the Evaluator.walkFunction() function located in the packages/evaluator/src/evaluator.js file, where manipulation of the condition argument allows for the execution of arbitrary code.

Recommendations As a temporary workaround, restrict the use of the Evaluator.walkFunction() function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Dem0000000

Vendors

Affected products

Weakness enumeration

CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\'Injection\')

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers

CVE-2026-112102