A critical OS command injection vulnerability in frictionless-py allows unauthenticated attackers to execute arbitrary code on a victim's machine by providing a crafted Data Package descriptor.

The vulnerability exists in the frictionless.console.commands.explore module where user-controlled resource paths from a datapackage.json file are passed unsanitized to the os.system function. This allows an attacker to inject shell metacharacters into the path, which are then interpreted and executed by the host operating system with the privileges of the user running the explore command.

Successful exploitation leads to full remote code execution within the security context of the user executing the command. This poses a severe risk to data integrity and confidentiality, as an attacker could access sensitive environment variables, modify local files, or deploy persistent malware. Given the CVSS score of 8.8, this vulnerability represents a high-severity threat to any organization utilizing this library for automated data processing or analysis.

Immediate Action: Discontinue use of the explore command on untrusted Data Package descriptors until an official security update is released and applied.

Proactive Monitoring: Review system and process logs for anomalous command executions originating from the frictionless-py environment, particularly those involving shell metacharacters like semicolons or ampersands.

Compensating Controls: Ensure that any Data Package descriptors processed by the software are strictly validated against a known-safe schema or originate from trusted, internal sources only.

Public Exploit Available: Yes, a functional proof-of-concept repository exists on GitHub as documented in the linked research write-up.

Given the availability of a public proof-of-concept and the high-severity nature of command injection, users must treat this vulnerability with extreme urgency. Organizations should restrict the use of the frictionless explore command to trusted files only and monitor for vendor-provided patches to update their installations as soon as a fix becomes available.