CVE-2026-85694: LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that eval

LaVague version 0.2.35 has a remote code execution vulnerability (RCE, where attackers can run commands on a system they don't own) in a component called PythonFromMarkdownExtractor.extract_as_object that unsafely runs Python code generated by an AI model. Attackers can exploit this by injecting malicious code through web pages using indirect prompt injection (tricking the AI by hiding instructions in web content), allowing them to execute harmful commands on the operator's computer without any human review.