What is the CVSS score of CVE-2026-48054?

CVE-2026-48054 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of OpenZeppelin Contracts Wizard are affected by CVE-2026-48054?

@openzeppelin/wizard npm package versions 0.10.8 and earlier contain a code injection vulnerability that executes arbitrary code on developer machines during routine testing operations.. A patch is available.

How to fix or mitigate CVE-2026-48054?

Within 24 hours: Identify all internal projects using @openzeppelin/wizard and halt npm/forge test execution in production-connected environments. Within 7 days: Update all instances of @openzeppelin/wizard to the patched version specified in GHSA-4x76-22x2-rx8v (>0.10.8). Within 30 days: Audit git commit history from all affected developers for suspicious changes made while vulnerable versions were in use.

OpenZeppelin Contracts Wizard CVE-2026-48054

HIGH

Code Injection (CWE-94)

2026-06-11 https://github.com/OpenZeppelin/contracts-wizard

GHSA-4x76-22x2-rx8v

Node.js Code Injection RCE

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Attacker input reaches a network-reachable integrator without auth (AV:N/PR:N), exploitation needs only a crafted string (AC:L), but a developer must run the generated tests (UI:R), yielding full RCE (C/I/A:H).

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Jun 11, 2026 - 13:54 vuln.today

Analysis Generated

Jun 11, 2026 - 13:54 vuln.today

DescriptionGitHub Advisory

Summary

The OpenZeppelin Contracts Wizard generated Hardhat (test/test.ts) and Foundry (test/<Name>.t.sol) example test files that interpolated user-supplied strings (opts.name, opts.uri) into the test source without escaping. A crafted input could produce a generated test file in which the input string broke out of its surrounding literal and was parsed as code, executing when a developer ran npm test or forge test on the downloaded project.

Impact

Users of the hosted Wizard at https://wizard.openzeppelin.com: no action required. The site has been redeployed with the fix.
Users of @openzeppelin/wizard via the documented public API: not affected. The vulnerable functions (zipHardhat, zipFoundry) are not part of the package's documented public exports.
Callers of zipHardhat / zipFoundry who forward externally-controlled strings into opts.name / opts.uri: upgrade to 0.10.9.

Patches

Fixed in @openzeppelin/wizard@0.10.9.

Articles & Coverage 2

News 3 New Node.js Vulnerabilities - 3 High Severity Jun 12, 2026 News 3 New Node.js Vulnerabilities - 3 High Severity Jun 11, 2026

AnalysisAI

Code injection in OpenZeppelin Contracts Wizard's @openzeppelin/wizard npm package (<=0.10.8) allows attacker-supplied strings passed through opts.name or opts.uri into the zipHardhat/zipFoundry helpers to break out of string literals inside generated Hardhat and Foundry test scaffolding, leading to arbitrary code execution on the developer's machine when npm test or forge test is run. No public exploit is identified at time of analysis, but a vendor advisory and patched commit are public via GitHub Security Advisory GHSA-4x76-22x2-rx8v.

Technical ContextAI

The flaw lives in packages/core/solidity/src/utils/sanitize.ts which previously used JSON.stringify for ASCII and a naive replace(/"/g, '\"') for unicode bodies when embedding user strings into Solidity (unicode"...") and TypeScript string literals inside the generated test/<Name>.t.sol and test/test.ts files. Because Solidity's unicode"..." literal treats \ as an escape and excludes CR/LF/VT from its raw body, an input such as é\"); could terminate the literal and inject statements; the same pattern broke TypeScript literals in the Hardhat template. This is a classic CWE-94 (Improper Control of Generation of Code) injection that manifests at code-generation time rather than at runtime of the wizard itself, and only affects integrators who feed externally-controlled values to the undocumented zipHardhat/zipFoundry exports (CPE: pkg:npm/@openzeppelin/wizard).

RemediationAI

Vendor-released patch: @openzeppelin/wizard@0.10.9 - upgrade any project that calls zipHardhat or zipFoundry to this version (fix commit ec12c44f8d9e0491eba31037f95b36e98ec58b5f, advisory GHSA-4x76-22x2-rx8v). If upgrading is delayed, integrators should stop forwarding externally-controlled input into opts.name/opts.uri, or pre-sanitize those values by rejecting strings containing ", \, CR, LF, and vertical tab before invoking the undocumented zipHardhat/zipFoundry functions - accepting the trade-off that legitimate non-ASCII project names may be rejected. As an additional compensating control, do not execute npm test or forge test on wizard-generated projects whose inputs originated from untrusted users until they have been reviewed.