---
id: CVE-2026-85694
title: >-
  LaVague 0.2.35 contains a remote code execution vulnerability in
  PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted
  language model output derived from web page content
summary: >-
  LaVague 0.2.35 contains a remote code execution vulnerability in
  PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted
  language model output derived from web page content. Attackers can inject
  malicious Python code throu…
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-94
vendor: lavague-ai
product: LaVague
affected:
  - LaVague <= 0.2.35
published: '2026-09-04'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T15:53:23.707'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-85694'
references:
  - url: 'https://github.com/lavague-ai/LaVague'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/lavague-ai/LaVague/blob/9024bb83/lavague-core/lavague/core/extractors.py
    label: disclosure@vulncheck.com
  - url: 'https://github.com/lavague-ai/LaVague/issues/650'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/lavague-0.2.35-remote-code-execution-via-eval-extraction
    label: disclosure@vulncheck.com
  - url: 'https://github.com/lavague-ai/LaVague/issues/650'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00942
epssPercentile: 0.59316
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-08T17:11:34.033493Z'
ingestedAt: '2026-09-08T19:08:49.592Z'
---

## Overview

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute arbitrary code on the operator's host without review.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.