CVE-2026-44265

A flaw was found in Elo. This vulnerability allows an attacker to achieve arbitrary code execution or Structured Query Language SQL injection by supplying malicious input to the programmatic Abstract Syntax Tree AST interface. Because the interface inserts unvalidated input directly into generate...