Redocly
Monthly
Arbitrary code execution in Redocly CLI and @redocly/respect-core before version 2.33.0 allows a crafted Arazzo description to run attacker-controlled JavaScript with the privileges of the CLI process. The flaw lives in the `respect` command's `$faker` runtime-expression evaluator (get-value-from-context.ts), which permits property traversal through `constructor`, `prototype`, and `__proto__` to reach the JavaScript Function constructor; because the vector is local (AV:L) with required user interaction (UI:R, PR:N), a victim or CI job must actually process an untrusted, attacker-supplied workflow description for exploitation to occur. Impact is high in CI environments, where the injected code can execute shell commands or read pipeline secrets, while users who only run trusted, self-authored workflows are unaffected; no public exploit code was identified at the time of analysis, but a patch exists in 2.33.0.
Arbitrary code execution in Redocly CLI and @redocly/respect-core before version 2.33.0 allows a crafted Arazzo description to run attacker-controlled JavaScript with the privileges of the CLI process. The flaw lives in the `respect` command's `$faker` runtime-expression evaluator (get-value-from-context.ts), which permits property traversal through `constructor`, `prototype`, and `__proto__` to reach the JavaScript Function constructor; because the vector is local (AV:L) with required user interaction (UI:R, PR:N), a victim or CI job must actually process an untrusted, attacker-supplied workflow description for exploitation to occur. Impact is high in CI environments, where the injected code can execute shell commands or read pipeline secrets, while users who only run trusted, self-authored workflows are unaffected; no public exploit code was identified at the time of analysis, but a patch exists in 2.33.0.