← CVE Intelligence

CVE-2025-55346

Unintended dynamic code execution leads to remote code execution by network attackers PUBLISHED

Description (CNA)

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 0

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.