AIKIDO-2026-687744

TL;DR

When generating models from an XML Schema, datamodel-code-generator resolves the schemaLocation attribute on xs:include, xs:import, xs:redefine, and xs:override against the source directory and reads the target with only an existence check. An attacker who controls the input XSD can use ../ traversal or an absolute path to read files outside the input base directory, and schema-shaped contents are folded into the generated code. Unlike the JSON Schema $ref path there is no remote-reference gate, so disabling remote references does not block it. The fix rejects schemaLocation targets that resolve outside the input base path.