https://vulnerability.circl.lu/sightings/feed 2026-07-31T02:06:07.798705+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5aa9e4ed-f5c6-400e-b158-933571d79762/export 2026-07-31T02:06:07.814484+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5aa9e4ed-f5c6-400e-b158-933571d79762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55389", "type": "seen", "source": "https://gist.github.com/alon710/d0f3f961aeff39e79a8edafcd7786784", "content": "# CVE-2026-55389: CVE-2026-55389: Path Traversal and Security Control Bypass in datamodel-code-generator via Scheme Reference Resolution\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-55389\n\n## Summary\nAn arbitrary local file read and path traversal bypass vulnerability in datamodel-code-generator before version 0.62.0 allows unauthenticated remote attackers to read arbitrary files via crafted JSON-Schema $ref references using the file:// scheme or directory traversal sequences.\n\n## TL;DR\nUnauthenticated path traversal and local file read vulnerability in datamodel-code-generator prior to 0.62.0 allowed attackers to bypass --no-allow-remote-refs using the file:// scheme or relative pathing, revealing host system file structure and secrets.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CVE ID**: CVE-2026-55389\n- **Vulnerability Type**: Directory Traversal (CWE-22) / Security Control Bypass\n- **CVSS Base Score**: 7.5 (High)\n- **Attack Vector**: Network (AV:N)\n- **Affected Component**: jsonschema parser (jsonschema.py)\n- **Exploit Status**: Proof-of-Concept (PoC) documented\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- datamodel-code-generator\n- **datamodel-code-generator**: < 0.62.0 (Fixed in: `0.62.0`)\n\n## Mitigation\n\n- Upgrade to datamodel-code-generator version 0.62.0 or newer.\n- Enforce strict input validation on JSON schemas containing external $ref structures.\n- Disable parsing of untrusted user-supplied schemas in automated backend environments.\n\n**Remediation Steps:**\n1. Identify internal usages of datamodel-code-generator in dependency manifests (e.g., requirements.txt, pyproject.toml).\n2. Update the package pin to >=0.62.0.\n3. Test build pipelines to ensure schema configurations continue resolving trusted internal paths correctly.\n\n## References\n\n- [GitHub Security Advisory GHSA-8359-h9fx-j6v9](https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8359-h9fx-j6v9)\n- [Official Fix Commit on GitHub](https://github.com/koxudaxi/datamodel-code-generator/commit/2ff4a72b4550a2b2069754c5b075b1655067e5fb)\n- [PyPI Release Tag 0.62.0](https://github.com/koxudaxi/datamodel-code-generator/releases/tag/0.62.0)\n- [Project Repository](https://github.com/koxudaxi/datamodel-code-generator)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-55389) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T10:31:22.432945Z"} 2026-07-29T10:31:22.432945+00:00 https://vulnerability.circl.lu/sighting/a0197c2e-2cdf-4205-b234-7230cc504230/export 2026-07-31T02:06:07.817451+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a0197c2e-2cdf-4205-b234-7230cc504230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqm2yz35622", "content": "CVE-2026-55389 - datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`\nCVE ID : CVE-2026-55389\n \n Published : July 28, 2026, 10:17 p.m. | 22\u00a0minutes ago\n \n Description : datam...", "creation_timestamp": "2026-07-28T23:50:46.627434Z"} 2026-07-28T23:50:46.627434+00:00 https://vulnerability.circl.lu/sighting/d7ccf04e-1eb8-4a49-949e-fb315340af91/export 2026-07-31T02:06:07.817609+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d7ccf04e-1eb8-4a49-949e-fb315340af91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55389", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqjbutsj42m", "content": "\ud83d\udfe0 CVE-2026-55389 - High (7.5)\n\ndatamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-55389/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-28T23:00:56.862390Z"} 2026-07-28T23:00:56.862390+00:00 https://vulnerability.circl.lu/sighting/16608e03-7891-4777-a402-628518aab992/export 2026-07-31T02:06:07.817730+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "16608e03-7891-4777-a402-628518aab992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-55389", "type": "published-proof-of-concept", "source": "https://github.com/koxudaxi/datamodel-code-generator/security/advisories/GHSA-8359-h9fx-j6v9", "content": "", "creation_timestamp": "2026-07-28T22:35:06.308651Z"} 2026-07-28T22:35:06.308651+00:00