CVE-2026-93349 Frictionless OS Command Injection via explore Console Command
Attackers can execute arbitrary OS commands by crafting a malicious Data Package descriptor that triggers unsanitized shell execution in Frictionless.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-93349?
CVE-2026-93349 is a high-severity command injection vulnerability in frictionlessdata frictionless-py, published on 23 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package. This vulnerability was also addressed in version 5.20.0rc2 of the pre-release branch.
Weakness: CWE-78
Which versions are affected by CVE-2026-93349?
How do I fix CVE-2026-93349?
No fix has been published for CVE-2026-93349 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-93349 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-93349 exists.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-4jpg-jrw7-h58p.