Common Weakness Enumeration

    CWE Definition / CWE-454

    CWE-454: External Initialization of Trusted Variables or Data Stores

    The product initializes critical internal variables or data stores using inputs that can be modified by untrusted actors.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-1419: Incorrect Initialization of Resource

    CWE-456: Missing Initialization of a Variable