CVE-2026-108384 dataclasses-avroschema allows code injection through fixed-type aliases supplied as a bare string
Attackers can execute arbitrary code by supplying a bare string as a fixed-type alias in a crafted Avro schema, affecting users of dataclasses-avroschema.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-108384?
CVE-2026-108384 is a high-severity code injection vulnerability in marcosschroh dataclasses-avroschema, published on 13 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, BaseGenerator.parse_fixed interpolates a fixed type's aliases value directly into a generated types.confixed annotation. A list is represented with quoted entries, but a bare string is emitted as an unquoted Python expression and evaluated when the generated module is imported, allowing arbitrary code execution from a crafted schema. Version 0.70.6 fixes the vulnerability by rejecting aliases values that are not lists.
Weakness: CWE-94
Which versions are affected by CVE-2026-108384?
How do I fix CVE-2026-108384?
No fix has been published for CVE-2026-108384 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-108384 being exploited?
There is no known exploitation of CVE-2026-108384 in the wild and no public exploit code.
Sources
Also known as GHSA-8j5c-xq6f-2c43.