diff --git a/examples/codeql-probe/unsafe_endpoint.py b/examples/codeql-probe/unsafe_endpoint.py
new file mode 100644
index 00000000..313fea8d
--- /dev/null
+++ b/examples/codeql-probe/unsafe_endpoint.py
@@ -0,0 +1,11 @@
+"""Intentionally vulnerable CodeQL probe. Do not run or merge this example."""
+
+from flask import Flask, request
+
+app = Flask(__name__)
+
+
+@app.route("/evaluate")
+def evaluate_expression():
+    expression = request.args["expression"]
+    return str(eval(expression))