Common Weakness Enumeration
CWE-454 External Initialization of Trusted Variables or Data Stores
Description
The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-454 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-whxw-24jc-cwmv | CVE-2026-54003 | CRITICAL | - |
Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header |
2026-06-18 |
| GHSA-mj59-h3q9-ghfh | CVE-2026-44995 | MODERATE |
OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config |
2026-05-19 |