CWEweakness

CWE-1100 Insufficient Isolation of System-Dependent Functions

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product or code does not isolate system-dependent functionality into separate standalone modules.

Common consequences

• Other: Reduce Maintainability — This issue makes it more difficult to maintain and/or port the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.

Related

Child of · CWE (1)

  • CWE-1061 Insufficient Encapsulation weakness

Referenced by CVE · weakness (4)

  • CVE-2026-44007 vm2 is an open source vm/sandbox for Node.js. vulnerability
  • CVE-2026-44008 vm2 is an open source vm/sandbox for Node.js. vulnerability
  • CVE-2025-3466 langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with… vulnerability
  • CVE-2024-9612 In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. vulnerability