AIKIDO-2026-570574

TL;DR

When --extra-template-data supplies a model comment containing a bare carriage return or other line-terminating control characters, built-in Jinja2 templates render the value into generated Python # comments without escaping. Python treats bare CR as a physical line terminator, so attacker text after the CR can be parsed as executable Python in the generated class body. Importing the generated module executes the injected code at class-definition time. The fix normalizes comment values and prefixes continuation lines so attacker content stays inside comment blocks.