Description
Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package. This vulnerability was also addressed in version 5.20.0rc2 of the pre-release branch.
Published: 2026-09-23
Score: 8.6 High
EPSS: 2.1% Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is an OS command injection in the explore console command of frictionless-py. An attacker can embed shell metacharacters in the resource path field of a datapackage.json descriptor. When the explore command processes that descriptor, the unsanitized value is concatenated into a shell command that is executed via os.system, allowing the attacker to run arbitrary operating system commands with the privileges of the user who invokes explore. This flaw allows an attacker to execute any command in the victim’s security context, providing full code execution capability. The issue is fixed in version 5.20.0rc2 of the pre‑release branch.

Affected Systems

The affected product is frictionlessdata’s frictionless-py, specifically version 5.20.0rc1 and earlier. Any installation of this library that processes untrusted datapackage.json files using the explore command is vulnerable to this command injection flaw.

Risk and Exploitability

The CVSS score of 8.6 indicates a high severity. The EPSS score is 2%, indicating a low but nonzero probability of exploitation. The vulnerability is not listed in CISA KEV, so no publicly documented exploits are known. Exploitation requires the attacker to deliver a crafted datapackage.json to the victim and have the victim run the explore command; therefore the attack vector is local software execution. Prompt patching is recommended to eliminate the risk of arbitrary command execution.

Generated by OpenCVE AI on September 28, 2026 at 16:27 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade frictionless-py to a version that contains the command‑injection fix, such as 5.20.0rc2 or later.
  • If an upgrade is not possible, refrain from using the explore command with any untrusted datapackage.json files.
  • Deploy the tool in an isolated environment with restricted user permissions, or run it under a dedicated, least‑privileged account.
  • Validate or sanitize resource path fields before they are passed to the explore command to prevent shell metacharacters.

Generated by OpenCVE AI on September 28, 2026 at 16:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 28 Sep 2026 15:00:00 +0000

Type Values Removed Values Added
Description Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package. Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package. This vulnerability was also addressed in version 5.20.0rc2 of the pre-release branch.
References

Fri, 25 Sep 2026 05:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 24 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Frictionlessdata
Frictionlessdata frictionless-py
Vendors & Products Frictionlessdata
Frictionlessdata frictionless-py

Wed, 23 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
Description Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package.
Title Frictionless OS Command Injection via explore Console Command
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Frictionlessdata Frictionless-py
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-28T14:48:00.776Z

Reserved: 2026-09-17T18:41:40.757Z

Link: CVE-2026-93349

cve-icon Vulnrichment

Updated: 2026-09-23T18:40:10.175Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-23T17:17:19.653

Modified: 2026-09-28T15:17:24.560

Link: CVE-2026-93349

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-28T16:30:03Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')