Renovate
Monthly
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with repository write access to execute arbitrary OS commands on the machine running Renovate by committing a crafted gleam.toml containing shell metacharacters in dependency names. The depName field sourced from gleam.toml is interpolated directly into a gleam deps update shell invocation without using shlex quoting, enabling full shell escape. A detailed proof-of-concept is publicly documented in the GHSA advisory (GHSA-xjr7-3c3g-m763); no confirmed active exploitation appears in CISA KEV at time of analysis.
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with write access to execute arbitrary OS commands on the system running Renovate by embedding shell metacharacters in the `repository` field of a crafted `Chart.yaml` file. The unsanitized value is interpolated directly into a `helm registry login` shell invocation without applying `shlex.quote()` escaping. A detailed proof-of-concept demonstrating process termination via `kill 1` is publicly documented in GHSA-3f44-xw83-3pmg; no public exploit identified at time of analysis beyond the POC, and CISA KEV does not list this CVE.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository write access to execute arbitrary commands on the machine running Renovate by supplying a maliciously named hermit dependency. The root cause is the unsanitized concatenation of user-controlled `depName` values directly into `./hermit install` and `./hermit uninstall` shell commands in `lib/modules/manager/hermit/artifacts.ts`. A detailed proof-of-concept is publicly available in GitHub Security Advisory GHSA-36j9-mx87-2cff; no confirmed active exploitation or CISA KEV listing exists at time of analysis.
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write access to execute arbitrary commands on the CI/CD host running Renovate by supplying malicious `packageName` values via a crafted `renovate.json5` configuration file. The root cause is in `lib/modules/manager/npm/post-update/npm.ts`, where user-controlled package names and workspace keys are interpolated directly into shell commands during lock file maintenance without shell escaping via `shlex.quote()`. A working proof of concept is publicly available in the official GitHub Security Advisory (GHSA-fr4j-65pv-gjjj), and a vendor-released patch exists in version 40.33.0; no confirmed active exploitation has been reported at time of analysis.
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors with write access to execute arbitrary shell commands on the Renovate host machine by embedding crafted chart names in `kustomization.yaml` files that bypass shell escaping in `helm pull` invocations. A detailed proof-of-concept demonstrating process termination via `kill 1` against a Docker-hosted Renovate runner was published with GHSA-xv56-3wq5-9997, confirming exploitability - though no confirmed active exploitation (CISA KEV) has been observed. Exploitation is constrained by the requirement for both repository write access and the non-default `kustomizeInflateHelmCharts` postUpdateOption.
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runtime when the tool processes a repository containing a malicious `gradle-wrapper.properties`. Versions >= 32.124.0 and < 42.68.5 of renovatebot/renovate (and Mend renovate-ce/renovate-ee before 13.3.0) are affected whenever Renovate performs Gradle Wrapper artifact handling. An attacker who can introduce a crafted `distributionUrl` containing `$(...)` shell substitution into a scanned repository gains arbitrary command execution as the Renovate process, potentially exfiltrating CI/CD tokens, repository credentials, and internal network resources; a proof-of-concept screen recording demonstrating `/etc/passwd` exfiltration exists, and no public exploit identified at time of analysis for CISA KEV status.
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full process environment - including privileged credentials - into every child process spawned during dependency update operations. The regression was introduced inadvertently on 2025-12-30 when Renovate migrated to the `execa` library, whose default behavior extends rather than replaces environment variables, silently bypassing Renovate's intended allowlist filtering. Both insider attackers (with repository write access) and outsider attackers (via supply-chain compromise of a processed dependency) can embed credential-harvesting code in scripts that Renovate executes, exfiltrating GitHub tokens, registry credentials, and cloud IAM keys accessible to the deployment. No public exploit has been identified at time of analysis, but the vendor explicitly recommends rotating all credentials that affected Renovate instances had access to.
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43.65.0 through 43.102.11 to arbitrary code execution triggered by malicious Bazel dependencies. When lockFileMaintenance invokes 'bazel mod deps', dependency-provided code within ctx.execute statements executes directly on the Renovate host - enabling both insider and outsider supply chain attacks against affected configurations. No public exploit code has been identified at time of analysis, and a vendor-confirmed patch is available at 43.102.11.
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with repository write access to execute arbitrary OS commands on the machine running Renovate by committing a crafted gleam.toml containing shell metacharacters in dependency names. The depName field sourced from gleam.toml is interpolated directly into a gleam deps update shell invocation without using shlex quoting, enabling full shell escape. A detailed proof-of-concept is publicly documented in the GHSA advisory (GHSA-xjr7-3c3g-m763); no confirmed active exploitation appears in CISA KEV at time of analysis.
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with write access to execute arbitrary OS commands on the system running Renovate by embedding shell metacharacters in the `repository` field of a crafted `Chart.yaml` file. The unsanitized value is interpolated directly into a `helm registry login` shell invocation without applying `shlex.quote()` escaping. A detailed proof-of-concept demonstrating process termination via `kill 1` is publicly documented in GHSA-3f44-xw83-3pmg; no public exploit identified at time of analysis beyond the POC, and CISA KEV does not list this CVE.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository write access to execute arbitrary commands on the machine running Renovate by supplying a maliciously named hermit dependency. The root cause is the unsanitized concatenation of user-controlled `depName` values directly into `./hermit install` and `./hermit uninstall` shell commands in `lib/modules/manager/hermit/artifacts.ts`. A detailed proof-of-concept is publicly available in GitHub Security Advisory GHSA-36j9-mx87-2cff; no confirmed active exploitation or CISA KEV listing exists at time of analysis.
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write access to execute arbitrary commands on the CI/CD host running Renovate by supplying malicious `packageName` values via a crafted `renovate.json5` configuration file. The root cause is in `lib/modules/manager/npm/post-update/npm.ts`, where user-controlled package names and workspace keys are interpolated directly into shell commands during lock file maintenance without shell escaping via `shlex.quote()`. A working proof of concept is publicly available in the official GitHub Security Advisory (GHSA-fr4j-65pv-gjjj), and a vendor-released patch exists in version 40.33.0; no confirmed active exploitation has been reported at time of analysis.
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors with write access to execute arbitrary shell commands on the Renovate host machine by embedding crafted chart names in `kustomization.yaml` files that bypass shell escaping in `helm pull` invocations. A detailed proof-of-concept demonstrating process termination via `kill 1` against a Docker-hosted Renovate runner was published with GHSA-xv56-3wq5-9997, confirming exploitability - though no confirmed active exploitation (CISA KEV) has been observed. Exploitation is constrained by the requirement for both repository write access and the non-default `kustomizeInflateHelmCharts` postUpdateOption.
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runtime when the tool processes a repository containing a malicious `gradle-wrapper.properties`. Versions >= 32.124.0 and < 42.68.5 of renovatebot/renovate (and Mend renovate-ce/renovate-ee before 13.3.0) are affected whenever Renovate performs Gradle Wrapper artifact handling. An attacker who can introduce a crafted `distributionUrl` containing `$(...)` shell substitution into a scanned repository gains arbitrary command execution as the Renovate process, potentially exfiltrating CI/CD tokens, repository credentials, and internal network resources; a proof-of-concept screen recording demonstrating `/etc/passwd` exfiltration exists, and no public exploit identified at time of analysis for CISA KEV status.
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full process environment - including privileged credentials - into every child process spawned during dependency update operations. The regression was introduced inadvertently on 2025-12-30 when Renovate migrated to the `execa` library, whose default behavior extends rather than replaces environment variables, silently bypassing Renovate's intended allowlist filtering. Both insider attackers (with repository write access) and outsider attackers (via supply-chain compromise of a processed dependency) can embed credential-harvesting code in scripts that Renovate executes, exfiltrating GitHub tokens, registry credentials, and cloud IAM keys accessible to the deployment. No public exploit has been identified at time of analysis, but the vendor explicitly recommends rotating all credentials that affected Renovate instances had access to.
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43.65.0 through 43.102.11 to arbitrary code execution triggered by malicious Bazel dependencies. When lockFileMaintenance invokes 'bazel mod deps', dependency-provided code within ctx.execute statements executes directly on the Renovate host - enabling both insider and outsider supply chain attacks against affected configurations. No public exploit code has been identified at time of analysis, and a vendor-confirmed patch is available at 43.102.11.