CVE-2024-54152

CRITICAL

Angular Expressions < 1.4.3 - Remote Code Execution via Sandbox Escape

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-54152. PoCs published by math-x-io.

AI-analyzed exploit summary This repository contains a working proof-of-concept for CVE-2024-54152, demonstrating arbitrary code execution via Angular Expressions sandbox escape. The PoC includes a vulnerable Node.js application and scripts in Go and Python to exploit it.

Description

Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undisclosed) payload, one can get full access to Arbitrary code execution on the system. The problem has been patched in version 1.4.3 of Angular Expressions. Two possible workarounds are available. One may either disable access to `__proto__` globally or make sure that one uses the function with just one argument.

Exploits (1)

nomisec WORKING POC 13 stars
by math-x-io · poc
https://github.com/math-x-io/CVE-2024-54152-poc

This repository contains a working proof-of-concept for CVE-2024-54152, demonstrating arbitrary code execution via Angular Expressions sandbox escape. The PoC includes a vulnerable Node.js application and scripts in Go and Python to exploit it.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Angular Expressions < 1.4.3
No auth needed
Prerequisites: Vulnerable version of Angular Expressions (< 1.4.3) · Access to the `/parse` endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Scores

CVSS v4 9.3
EPSS 0.3031
EPSS Percentile 96.8%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-94
Status published
Products (2)
npm/angular-expressions 0 - 1.4.3npm
peerigon/angular-expressions < 1.4.3
Published Dec 10, 2024
Tracked Since Feb 18, 2026