Description
Frictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package. This vulnerability was also addressed in version 5.20.0rc2 of the pre-release branch.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| frictionlessdata | frictionless-py | < 5.19.1, 5.20.0rc1 – < 5.20.0rc2 | 5.19.1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
SaiTeja-Erukude/CVE-2026-93349-frictionless-command-injection ★ 0 · Sep 23, 2026
Frictionless <= 5.20.0rc1 OS command injection via CLI explore.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- Researcher Disclosure technical-description exploit
- Proposed Pull Request issue-tracking patch
- frictionless-py 5.19.1 Release Notes release-notes
- frictionless-py 5.20.0rc2 Release Notes release-notes
- https://www.vulncheck.com/advisories/frictionless-os-command-injection-via-explore-console-command third-party-advisory