CVE-2026-44265 | Enspirit Elo up to 1.0.0 AST API input validation

A vulnerability identified as problematic has been detected in Enspirit Elo up to 1.0.0. This affects an unknown part of the component AST API. Performing a manipulation of the argument int_literal.value/variable.name/member_access.property/object_literal keys/datapath segments/lambda.params[].name/SQL let binding name results in improper input validation.

This vulnerability is cataloged as CVE-2026-44265. The attack must be initiated from a local position. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More