CVE-2026-93349: Frictionless OS Command Injection via explore Console Command
Frictionless through 5.20.0rc1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a crafted Data Package descriptor to execute arbitrary operating system commands as the user who explores it. Attackers can place shell metacharacters in resource path values within a datapackage.json descriptor, which are passed unsanitized to os.system through a shell, causing arbitrary command execution in the victim's security context when they run the explore command against the untrusted package.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Frictionless through 5.20.0rc1 who run the explore console command against a Data Package from an untrusted source are exposed. Commands execute with the permissions of the user running explore.
What does an attacker need to do to exploit it?
The attacker needs to provide a crafted Data Package descriptor containing shell metacharacters in resource path values in datapackage.json. They then need to persuade a victim to run the explore command on that package.
Are users affected without interacting with a malicious package?
No exploit path is described without user interaction. The vulnerable behavior is triggered when a user runs explore against the attacker-controlled package.
What can be done if an update is not immediately available?
Do not run the explore console command on untrusted Data Packages or descriptors. Treat datapackage.json resource path values as untrusted input and inspect packages before exploring them.