CVE-2026-63720: datamodel-code-generator code injection via customBasePath before 0.70.0
CVE-2026-63720 is verified against datamodel-code-generator · pip affected versions: >= 0.11.6, < 0.70.0 fixed version: 0.70.0 This high reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00302.
pruva-verify REPRO-2026-00302 curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00302/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh Primary-source brief (manual researched): NVD states datamodel-code-generator prior to 0.70.0 has a code injection vulnerability when attackers control input schemas. A malicious customBasePath value containing embedded newlines and a dot-free Python expression is emitted verbatim into a generated 'from ... import ...' statement without identifier validation, causing arbitrary Python code execution when the generated module is imported. Upstream references include the fixing commit 545a96c56d1b6a8dd3f4a16c9090d8a4648d1e43 and release 0.70.0. Reproduction goal for the pipeline: exercise the generator's real input-to-output path and compare vulnerable vs fixed behavior from the advisory only; do not invent a broader PoC or claim beyond code injection on import of generated output.
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.