CVE-2026-108379 dataclasses-avroschema fixed namespaces allow code injection in generated annotations
Attackers can execute arbitrary code by crafting malicious Avro schema namespaces that are unsafely interpolated into generated Python annotations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-108379?
CVE-2026-108379 is a high-severity code injection vulnerability in marcosschroh dataclasses-avroschema, published on 13 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed inserts a fixed type's namespace value between quotes inside a generated types.confixed annotation without escaping or validating it. A crafted quote can terminate the namespace string and alter the surrounding annotation expression, which Python evaluates when the generated class is defined, allowing arbitrary code execution. Version 0.70.6 fixes the vulnerability by requiring the namespace to be a dot-separated sequence of valid Avro names.
Weakness: CWE-94
Which versions are affected by CVE-2026-108379?
How do I fix CVE-2026-108379?
No fix has been published for CVE-2026-108379 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-108379 being exploited?
There is no known exploitation of CVE-2026-108379 in the wild and no public exploit code.
Sources
Also known as GHSA-h9q3-f96w-f88j.