Remote Code Execution Risk in Python Client Generator by OpenAPI Generators

CVE-2026-105801

What is CVE-2026-105801?

The OpenAPI Python client has a vulnerability that allows an attacker to craft malicious content in OpenAPI documents, which, when processed by the client generator, can lead to the generation of Python code containing attacker-controlled code. This code executes when the user imports the generated client, jeopardizing the integrity, confidentiality, and availability of the importing environment. Users are urged to upgrade to version 0.29.1 or later to mitigate this risk.

References