MEDIUMCVE-2026-5532CVSS 6.3

CVE-2026-5532: Command Injection in ScrapeGraphAI

Platform

python

Component

scrapegraph-ai

Fixed in

1.0.1

1.1.1

1.2.1

1.3.1

1.4.1

1.5.1

1.6.1

1.7.1

1.8.1

1.9.1

1.10.1

1.11.1

1.12.1

1.13.1

1.14.1

1.15.1

1.16.1

1.17.1

1.18.1

1.19.1

1.20.1

1.21.1

1.22.1

1.23.1

1.24.1

1.25.1

1.26.1

1.27.1

1.28.1

1.29.1

1.30.1

1.31.1

1.32.1

1.33.1

1.34.1

1.35.1

1.36.1

1.37.1

1.38.1

1.39.1

1.40.1

1.41.1

1.42.1

1.43.1

1.44.1

1.45.1

1.46.1

1.47.1

1.48.1

1.49.1

1.50.1

1.51.1

1.52.1

1.53.1

1.54.1

1.55.1

1.56.1

1.57.1

1.58.1

1.59.1

1.60.1

1.61.1

1.62.1

1.63.1

1.64.1

1.65.1

1.66.1

1.67.1

1.68.1

1.69.1

1.70.1

1.71.1

1.72.1

1.73.1

1.74.1

AI Confidence: highNVDEPSS 0.9%Reviewed: May 2026

View on NVD

Save

CVE-2026-5532 is a command injection vulnerability discovered in ScrapeGraphAI, affecting versions from 1.0.0 through 1.74.0. This flaw allows attackers to execute arbitrary operating system commands, potentially leading to complete system compromise. A fix is available in version 1.10.0, and the vulnerability has been publicly disclosed with a proof-of-concept available.

Impact and Attack Scenarios

The command injection vulnerability in ScrapeGraphAI allows an attacker to execute arbitrary commands on the underlying system. This could involve gaining unauthorized access to sensitive data, installing malware, or even taking complete control of the server. Given the remote nature of the exploit, an attacker could potentially leverage this vulnerability to pivot to other systems within the network, significantly expanding the blast radius. The public availability of a proof-of-concept increases the likelihood of exploitation.

Exploitation Context

This vulnerability has been publicly disclosed and a proof-of-concept is available, indicating a high probability of exploitation. It was published on 2026-04-05. The vendor was contacted but did not respond. The vulnerability is not currently listed on CISA KEV, but its public nature warrants close monitoring.

Threat Intelligence

Exploit Status

Proof of ConceptUnknown

CISA KEVNO

Internet ExposureHigh

Reports1 threat report

EPSS

0.86% (75% percentile)

CISA SSVC

Exploitationpoc

Automatableno

Technical Impactpartial

CVSS Vector

Affected Software

Componentscrapegraph-ai

VendorScrapeGraphAI

Affected rangeFixed in

1.0 – 1.01.0.1

1.1 – 1.11.1.1

1.2 – 1.21.2.1

1.3 – 1.31.3.1

1.4 – 1.41.4.1

1.5 – 1.51.5.1

1.6 – 1.61.6.1

1.7 – 1.71.7.1

1.8 – 1.81.8.1

1.9 – 1.91.9.1

1.10 – 1.101.10.1

1.11 – 1.111.11.1

1.12 – 1.121.12.1

1.13 – 1.131.13.1

1.14 – 1.141.14.1

1.15 – 1.151.15.1

1.16 – 1.161.16.1

1.17 – 1.171.17.1

1.18 – 1.181.18.1

1.19 – 1.191.19.1

1.20 – 1.201.20.1

1.21 – 1.211.21.1

1.22 – 1.221.22.1

1.23 – 1.231.23.1

1.24 – 1.241.24.1

1.25 – 1.251.25.1

1.26 – 1.261.26.1

1.27 – 1.271.27.1

1.28 – 1.281.28.1

1.29 – 1.291.29.1

1.30 – 1.301.30.1

1.31 – 1.311.31.1

1.32 – 1.321.32.1

1.33 – 1.331.33.1

1.34 – 1.341.34.1

1.35 – 1.351.35.1

1.36 – 1.361.36.1

1.37 – 1.371.37.1

1.38 – 1.381.38.1

1.39 – 1.391.39.1

1.40 – 1.401.40.1

1.41 – 1.411.41.1

1.42 – 1.421.42.1

1.43 – 1.431.43.1

1.44 – 1.441.44.1

1.45 – 1.451.45.1

1.46 – 1.461.46.1

1.47 – 1.471.47.1

1.48 – 1.481.48.1

1.49 – 1.491.49.1

1.50 – 1.501.50.1

1.51 – 1.511.51.1

1.52 – 1.521.52.1

1.53 – 1.531.53.1

1.54 – 1.541.54.1

1.55 – 1.551.55.1

1.56 – 1.561.56.1

1.57 – 1.571.57.1

1.58 – 1.581.58.1

1.59 – 1.591.59.1

1.60 – 1.601.60.1

1.61 – 1.611.61.1

1.62 – 1.621.62.1

1.63 – 1.631.63.1

1.64 – 1.641.64.1

1.65 – 1.651.65.1

1.66 – 1.661.66.1

1.67 – 1.671.67.1

1.68 – 1.681.68.1

1.69 – 1.691.69.1

1.70 – 1.701.70.1

1.71 – 1.711.71.1

1.72 – 1.721.72.1

1.73 – 1.731.73.1

1.74.0 – 1.74.01.74.1

Weakness Classification (CWE)

CWE-78 CWE-77

Timeline

Reserved2026-04-04
Published2026-04-05
Modified2026-04-06
EPSS updated2026-04-12

Mitigation and Workarounds

The primary mitigation for CVE-2026-5532 is to upgrade ScrapeGraphAI to version 1.10.0 or later, which contains the fix. If an immediate upgrade is not possible, consider implementing input validation and sanitization on any user-supplied data used in system commands. While a direct WAF rule is difficult to implement without specific command patterns, restricting outbound network connections from the ScrapeGraphAI process can limit potential damage. After upgrading, confirm the vulnerability is resolved by attempting to trigger the vulnerable function with malicious input and verifying that the command is not executed.

How to fix

Update to version 1.10.0 or higher to mitigate the operating system command injection vulnerability. Review the source code to identify and correct the root cause of the vulnerability, ensuring that user input is properly validated and escaped before being used in operating system commands. Implement additional security measures, such as using an isolated execution environment, to limit the potential impact of the vulnerability.

CVE Security Newsletter

Vulnerability analysis and critical alerts directly to your inbox.

Frequently asked questions

What is CVE-2026-5532 — Command Injection in ScrapeGraphAI?

CVE-2026-5532 is a command injection vulnerability affecting ScrapeGraphAI versions 1.0.0 through 1.74.0, allowing attackers to execute arbitrary OS commands.

Am I affected by CVE-2026-5532 in ScrapeGraphAI?

You are affected if you are using ScrapeGraphAI versions 1.0.0 to 1.74.0. Upgrade to 1.10.0 or later to mitigate the risk.

How do I fix CVE-2026-5532 in ScrapeGraphAI?

Upgrade ScrapeGraphAI to version 1.10.0 or later. Consider input validation as a temporary workaround if an upgrade is not immediately possible.

Is CVE-2026-5532 being actively exploited?

A proof-of-concept is publicly available, indicating a high probability of exploitation. Monitor your systems closely.

Where can I find the official ScrapeGraphAI advisory for CVE-2026-5532?

Refer to the ScrapeGraphAI project's official release notes and security advisories for details on the fix and vulnerability.

NextGuard

Vulnerabilities

Is your project affected?

Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.

Python

Detect this CVE in your project

Upload your requirements.txt file and we'll tell you instantly if you're affected.

Supported formats: requirements.txt · Pipfile.lock

Scan free

Search CVEs

Upload requirements.txt

What do these metrics mean?

Attack Vector: Network — remotely exploitable over the internet. No physical or local access required. Widest attack surface.
Attack Complexity: Low — no special conditions required. Attacker can exploit reliably without depending on rare configurations or timing.
Privileges Required: None — unauthenticated. No login or credentials needed to exploit.
User Interaction: Required — victim must take an action: open a file, click a link, or visit a crafted page.
Scope: Unchanged — impact is limited to the vulnerable component itself.
Confidentiality: Low — partial or indirect data access. Attacker gains limited information.
Integrity: Low — attacker can modify some data with limited scope or impact.
Availability: Low — partial or intermittent denial of service. Attacker can degrade performance.