EUVD-2026-62474
GHSA-xmpw-q5r4-p783
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AV:L because exploitation is file-mediated through a checked-out repository; PR:L because repository write access is a standard contributor role, not admin; full C/I/A impact from arbitrary command execution; no scope change as impact is confined to the Renovate runner.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
Renovate versions from 39.53.0 before 40.33.0 contain a command injection vulnerability in the gleam manager where the depName parameter is appended to gleam deps update commands without proper sanitization. Attackers with repository write access can craft malicious gleam.toml files to execute arbitrary commands on the machine running Renovate.
AnalysisAI
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with repository write access to execute arbitrary OS commands on the machine running Renovate by committing a crafted gleam.toml containing shell metacharacters in dependency names. The depName field sourced from gleam.toml is interpolated directly into a gleam deps update shell invocation without using shlex quoting, enabling full shell escape. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to have write access to at least one git repository that is actively scanned by the vulnerable Renovate instance - this is the primary gate. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.4 with vector AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H reflects a well-calibrated risk profile: the local attack vector is appropriate because exploitation is mediated through repository files that Renovate processes rather than a direct network-facing interface, and high-privilege requirement (PR:H in the vendor's 4.0 assessment) reflects that the attacker must hold repository write access. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with write access to a repository scanned by Renovate commits a gleam.toml containing a dependency name that embeds shell operators - for example, '|| kill 1' as demonstrated in the published PoC - alongside a renovate.json5 that uses a custom datasource to make Renovate believe a newer version is available, forcing an update attempt. When Renovate's gleam manager runs, it constructs the unescaped command string gleam deps update || kill 1 and executes it via the system shell, causing the injected command to run with the privileges of the Renovate process. … |
| Remediation | Upgrade Renovate to version 40.33.0 or later; this is the vendor-confirmed fix as documented in GHSA-xjr7-3c3g-m763 and implemented in commit https://github.com/renovatebot/renovate/commit/d29698e0131231652970f02765312769975e4d38. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit your Renovate deployment to identify active versions and restrict repository write access to essential personnel only; verify that write-protection rules are enforced on default branches. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository wr
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with wr
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write ac
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors wit
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runt
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full pr
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today