Renovatebot
Monthly
Command injection in Renovate's Maven Wrapper manager allows an attacker with write access to a scanned repository to execute arbitrary OS commands on the host running Renovate when `binarySource=docker` mode is active. Unescaped `distributionType` values from `maven-wrapper.properties` are passed directly to a shell, giving the attacker full code execution in the Renovate process context. No public exploit or CISA KEV listing exists at time of analysis; vendor-released patch is available at version 44.14.7.
Command injection in Renovate's Mix package manager allows an attacker who can control private dependency package names to execute arbitrary OS commands as the Renovate process user. Versions before 44.14.7 fail to escape organization parameters before passing them to shell commands during dependency resolution in binarySource=docker mode. No public exploit code has been identified at time of analysis, but the attack surface is reachable whenever Renovate processes Elixir/Mix private dependencies under the affected configuration.
Credential exfiltration in Renovate (renovatebot/renovate) before 44.11.2 lets a malicious or compromised container registry steal the registry credentials Renovate holds. When enumerating container image tags/digests, Renovate follows an HTTP Link header pagination URL and re-attaches the original registry's credentials without checking that the follow-up URL shares the same origin (CWE-601 open redirect), so a hostile registry can redirect the authenticated request to an attacker-controlled host and capture the secrets. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not in CISA KEV.
Command injection in Renovate's Gradle Wrapper manager module allows a repository contributor to execute arbitrary OS commands on self-hosted Renovate instances. Open-source versions before 44.14.7 and Mend Renovate CE/EE before 15.4.0 fail to escape the `distributionUrl` value read from a repository-controlled `gradle/wrapper/gradle-wrapper.properties` file before passing it to the Gradle Wrapper CLI, enabling shell metacharacter injection. Exploitation is constrained to self-hosted deployments explicitly configured with `binarySource=docker` and `gradleWrapper` in `allowedUnsafeExecutions`; no public exploit code or active exploitation has been identified at time of analysis.
Command injection in Renovate's gomod manager (before 44.14.7) exposes CI/CD pipelines to arbitrary shell command execution as the Renovate user when a maliciously crafted Go module dependency name containing shell metacharacters is processed. The flaw is exercised only under two simultaneously required non-default configurations - `binarySource=docker` mode and `postUpdateOptions gomodUpdateImportPaths` enabled - confining exposure to a specific subset of Renovate deployments performing Go module major version updates. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Incomplete log sanitization in Renovate before 44.14.4 causes Mutual TLS private keys to be written in cleartext to application logs, exposing mTLS credentials to anyone with log read access. When hostRules[].httpsPrivateKey is configured directly (rather than via the documented secrets mechanism), the value is redacted in the field context but leaks verbatim wherever it appears elsewhere in log output - including interpolated log messages and aliased configuration keys. Recovery of the private key enables an attacker to impersonate the Renovate client in mTLS handshakes against downstream protected services. No public exploit has been identified at time of analysis.
Credential exfiltration in Renovate before 44.11.2 (and Mend Renovate CE/EE images/charts before 15.4.0, enterprise-edition helm chart before 10.4.0) lets a malicious or compromised NuGet registry harvest the configured registry credentials by returning an HTTP Link header whose 'next' pagination URL points to an attacker-controlled host. Renovate followed cross-origin pagination targets without an origin check and re-attached the registry credentials, delivering them to an arbitrary attacker-chosen server. Classified as an open redirect (CWE-601); no public exploit is identified at time of analysis and it is not in CISA KEV.
Credential disclosure in Renovate before 44.11.3 allows a malicious or compromised GitHub server to exfiltrate host credentials by returning a crafted HTTP Link header. When Renovate paginates GitHub API responses (as a repository host or via the github-releases, github-tags, or git-refs datasources), it blindly follows the 'next' pagination URL without verifying it still points to the originally-contacted host, sending the configured credentials to whatever host the attacker specifies. No public exploit has been identified and the issue is not in CISA KEV, but the CVSS 4.0 base score is 9.2 due to high confidentiality impact with a scope change.
Credential exfiltration in Renovate before 44.11.3 lets a malicious or compromised GitLab server steal the authentication tokens Renovate uses to talk to it. When Renovate follows GitLab API pagination, it trusts the server-supplied Link header without validating its destination, so an attacker-controlled server can redirect the credential-bearing follow-up request to attacker infrastructure (CWE-601 open redirect). Reported by VulnCheck with a CVSS 4.0 base score of 9.2; no public exploit identified at time of analysis and no CISA KEV listing.
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with repository write access to execute arbitrary OS commands on the machine running Renovate by committing a crafted gleam.toml containing shell metacharacters in dependency names. The depName field sourced from gleam.toml is interpolated directly into a gleam deps update shell invocation without using shlex quoting, enabling full shell escape. A detailed proof-of-concept is publicly documented in the GHSA advisory (GHSA-xjr7-3c3g-m763); no confirmed active exploitation appears in CISA KEV at time of analysis.
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with write access to execute arbitrary OS commands on the system running Renovate by embedding shell metacharacters in the `repository` field of a crafted `Chart.yaml` file. The unsanitized value is interpolated directly into a `helm registry login` shell invocation without applying `shlex.quote()` escaping. A detailed proof-of-concept demonstrating process termination via `kill 1` is publicly documented in GHSA-3f44-xw83-3pmg; no public exploit identified at time of analysis beyond the POC, and CISA KEV does not list this CVE.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository write access to execute arbitrary commands on the machine running Renovate by supplying a maliciously named hermit dependency. The root cause is the unsanitized concatenation of user-controlled `depName` values directly into `./hermit install` and `./hermit uninstall` shell commands in `lib/modules/manager/hermit/artifacts.ts`. A detailed proof-of-concept is publicly available in GitHub Security Advisory GHSA-36j9-mx87-2cff; no confirmed active exploitation or CISA KEV listing exists at time of analysis.
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write access to execute arbitrary commands on the CI/CD host running Renovate by supplying malicious `packageName` values via a crafted `renovate.json5` configuration file. The root cause is in `lib/modules/manager/npm/post-update/npm.ts`, where user-controlled package names and workspace keys are interpolated directly into shell commands during lock file maintenance without shell escaping via `shlex.quote()`. A working proof of concept is publicly available in the official GitHub Security Advisory (GHSA-fr4j-65pv-gjjj), and a vendor-released patch exists in version 40.33.0; no confirmed active exploitation has been reported at time of analysis.
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors with write access to execute arbitrary shell commands on the Renovate host machine by embedding crafted chart names in `kustomization.yaml` files that bypass shell escaping in `helm pull` invocations. A detailed proof-of-concept demonstrating process termination via `kill 1` against a Docker-hosted Renovate runner was published with GHSA-xv56-3wq5-9997, confirming exploitability - though no confirmed active exploitation (CISA KEV) has been observed. Exploitation is constrained by the requirement for both repository write access and the non-default `kustomizeInflateHelmCharts` postUpdateOption.
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runtime when the tool processes a repository containing a malicious `gradle-wrapper.properties`. Versions >= 32.124.0 and < 42.68.5 of renovatebot/renovate (and Mend renovate-ce/renovate-ee before 13.3.0) are affected whenever Renovate performs Gradle Wrapper artifact handling. An attacker who can introduce a crafted `distributionUrl` containing `$(...)` shell substitution into a scanned repository gains arbitrary command execution as the Renovate process, potentially exfiltrating CI/CD tokens, repository credentials, and internal network resources; a proof-of-concept screen recording demonstrating `/etc/passwd` exfiltration exists, and no public exploit identified at time of analysis for CISA KEV status.
Renovate's `minimumReleaseAge` supply-chain defense control is not enforced for digest-type dependency updates, allowing a newly published - potentially malicious - package digest to immediately trigger a pull request and CI pipeline execution before the configured stability waiting period elapses. All Renovate versions before 44.3.1 and Mend Renovate CE/EE images before 15.4.0 are affected when repositories combine the `minimumReleaseAge` setting with digest-pinned dependencies such as GitHub Actions commit SHAs, Docker images, Go modules, or NuGet packages. No public exploit has been identified at time of analysis, but the flaw directly undermines an intentionally configured supply-chain defense, making it high-priority for organizations that depend on this control.
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full process environment - including privileged credentials - into every child process spawned during dependency update operations. The regression was introduced inadvertently on 2025-12-30 when Renovate migrated to the `execa` library, whose default behavior extends rather than replaces environment variables, silently bypassing Renovate's intended allowlist filtering. Both insider attackers (with repository write access) and outsider attackers (via supply-chain compromise of a processed dependency) can embed credential-harvesting code in scripts that Renovate executes, exfiltrating GitHub tokens, registry credentials, and cloud IAM keys accessible to the deployment. No public exploit has been identified at time of analysis, but the vendor explicitly recommends rotating all credentials that affected Renovate instances had access to.
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43.65.0 through 43.102.11 to arbitrary code execution triggered by malicious Bazel dependencies. When lockFileMaintenance invokes 'bazel mod deps', dependency-provided code within ctx.execute statements executes directly on the Renovate host - enabling both insider and outsider supply chain attacks against affected configurations. No public exploit code has been identified at time of analysis, and a vendor-confirmed patch is available at 43.102.11.
Command injection in Renovate's Maven Wrapper manager allows an attacker with write access to a scanned repository to execute arbitrary OS commands on the host running Renovate when `binarySource=docker` mode is active. Unescaped `distributionType` values from `maven-wrapper.properties` are passed directly to a shell, giving the attacker full code execution in the Renovate process context. No public exploit or CISA KEV listing exists at time of analysis; vendor-released patch is available at version 44.14.7.
Command injection in Renovate's Mix package manager allows an attacker who can control private dependency package names to execute arbitrary OS commands as the Renovate process user. Versions before 44.14.7 fail to escape organization parameters before passing them to shell commands during dependency resolution in binarySource=docker mode. No public exploit code has been identified at time of analysis, but the attack surface is reachable whenever Renovate processes Elixir/Mix private dependencies under the affected configuration.
Credential exfiltration in Renovate (renovatebot/renovate) before 44.11.2 lets a malicious or compromised container registry steal the registry credentials Renovate holds. When enumerating container image tags/digests, Renovate follows an HTTP Link header pagination URL and re-attaches the original registry's credentials without checking that the follow-up URL shares the same origin (CWE-601 open redirect), so a hostile registry can redirect the authenticated request to an attacker-controlled host and capture the secrets. Reported by VulnCheck; no public exploit identified at time of analysis, and it is not in CISA KEV.
Command injection in Renovate's Gradle Wrapper manager module allows a repository contributor to execute arbitrary OS commands on self-hosted Renovate instances. Open-source versions before 44.14.7 and Mend Renovate CE/EE before 15.4.0 fail to escape the `distributionUrl` value read from a repository-controlled `gradle/wrapper/gradle-wrapper.properties` file before passing it to the Gradle Wrapper CLI, enabling shell metacharacter injection. Exploitation is constrained to self-hosted deployments explicitly configured with `binarySource=docker` and `gradleWrapper` in `allowedUnsafeExecutions`; no public exploit code or active exploitation has been identified at time of analysis.
Command injection in Renovate's gomod manager (before 44.14.7) exposes CI/CD pipelines to arbitrary shell command execution as the Renovate user when a maliciously crafted Go module dependency name containing shell metacharacters is processed. The flaw is exercised only under two simultaneously required non-default configurations - `binarySource=docker` mode and `postUpdateOptions gomodUpdateImportPaths` enabled - confining exposure to a specific subset of Renovate deployments performing Go module major version updates. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Incomplete log sanitization in Renovate before 44.14.4 causes Mutual TLS private keys to be written in cleartext to application logs, exposing mTLS credentials to anyone with log read access. When hostRules[].httpsPrivateKey is configured directly (rather than via the documented secrets mechanism), the value is redacted in the field context but leaks verbatim wherever it appears elsewhere in log output - including interpolated log messages and aliased configuration keys. Recovery of the private key enables an attacker to impersonate the Renovate client in mTLS handshakes against downstream protected services. No public exploit has been identified at time of analysis.
Credential exfiltration in Renovate before 44.11.2 (and Mend Renovate CE/EE images/charts before 15.4.0, enterprise-edition helm chart before 10.4.0) lets a malicious or compromised NuGet registry harvest the configured registry credentials by returning an HTTP Link header whose 'next' pagination URL points to an attacker-controlled host. Renovate followed cross-origin pagination targets without an origin check and re-attached the registry credentials, delivering them to an arbitrary attacker-chosen server. Classified as an open redirect (CWE-601); no public exploit is identified at time of analysis and it is not in CISA KEV.
Credential disclosure in Renovate before 44.11.3 allows a malicious or compromised GitHub server to exfiltrate host credentials by returning a crafted HTTP Link header. When Renovate paginates GitHub API responses (as a repository host or via the github-releases, github-tags, or git-refs datasources), it blindly follows the 'next' pagination URL without verifying it still points to the originally-contacted host, sending the configured credentials to whatever host the attacker specifies. No public exploit has been identified and the issue is not in CISA KEV, but the CVSS 4.0 base score is 9.2 due to high confidentiality impact with a scope change.
Credential exfiltration in Renovate before 44.11.3 lets a malicious or compromised GitLab server steal the authentication tokens Renovate uses to talk to it. When Renovate follows GitLab API pagination, it trusts the server-supplied Link header without validating its destination, so an attacker-controlled server can redirect the credential-bearing follow-up request to attacker infrastructure (CWE-601 open redirect). Reported by VulnCheck with a CVSS 4.0 base score of 9.2; no public exploit identified at time of analysis and no CISA KEV listing.
Command injection in Renovate's gleam manager (versions 39.53.0 through 40.33.0 exclusive) allows attackers with repository write access to execute arbitrary OS commands on the machine running Renovate by committing a crafted gleam.toml containing shell metacharacters in dependency names. The depName field sourced from gleam.toml is interpolated directly into a gleam deps update shell invocation without using shlex quoting, enabling full shell escape. A detailed proof-of-concept is publicly documented in the GHSA advisory (GHSA-xjr7-3c3g-m763); no confirmed active exploitation appears in CISA KEV at time of analysis.
Command injection in Renovate's helmv3 manager (versions 31.51.0 through 40.32.x) allows repository contributors with write access to execute arbitrary OS commands on the system running Renovate by embedding shell metacharacters in the `repository` field of a crafted `Chart.yaml` file. The unsanitized value is interpolated directly into a `helm registry login` shell invocation without applying `shlex.quote()` escaping. A detailed proof-of-concept demonstrating process termination via `kill 1` is publicly documented in GHSA-3f44-xw83-3pmg; no public exploit identified at time of analysis beyond the POC, and CISA KEV does not list this CVE.
Command injection in Renovate's hermit manager (versions 32.135.0 through 40.33.0) allows an attacker with repository write access to execute arbitrary commands on the machine running Renovate by supplying a maliciously named hermit dependency. The root cause is the unsanitized concatenation of user-controlled `depName` values directly into `./hermit install` and `./hermit uninstall` shell commands in `lib/modules/manager/hermit/artifacts.ts`. A detailed proof-of-concept is publicly available in GitHub Security Advisory GHSA-36j9-mx87-2cff; no confirmed active exploitation or CISA KEV listing exists at time of analysis.
Command injection in Renovate's npm manager (versions 35.63.0 through 40.33.0) allows attackers with repository write access to execute arbitrary commands on the CI/CD host running Renovate by supplying malicious `packageName` values via a crafted `renovate.json5` configuration file. The root cause is in `lib/modules/manager/npm/post-update/npm.ts`, where user-controlled package names and workspace keys are interpolated directly into shell commands during lock file maintenance without shell escaping via `shlex.quote()`. A working proof of concept is publicly available in the official GitHub Security Advisory (GHSA-fr4j-65pv-gjjj), and a vendor-released patch exists in version 40.33.0; no confirmed active exploitation has been reported at time of analysis.
Command injection in Renovate's kustomize manager (versions 39.218.0 through 40.33.0) allows repository contributors with write access to execute arbitrary shell commands on the Renovate host machine by embedding crafted chart names in `kustomization.yaml` files that bypass shell escaping in `helm pull` invocations. A detailed proof-of-concept demonstrating process termination via `kill 1` against a Docker-hosted Renovate runner was published with GHSA-xv56-3wq5-9997, confirming exploitability - though no confirmed active exploitation (CISA KEV) has been observed. Exploitation is constrained by the requirement for both repository write access and the non-default `kustomizeInflateHelmCharts` postUpdateOption.
Command injection in Renovate's Gradle Wrapper update mechanism allows arbitrary code execution inside the Renovate runtime when the tool processes a repository containing a malicious `gradle-wrapper.properties`. Versions >= 32.124.0 and < 42.68.5 of renovatebot/renovate (and Mend renovate-ce/renovate-ee before 13.3.0) are affected whenever Renovate performs Gradle Wrapper artifact handling. An attacker who can introduce a crafted `distributionUrl` containing `$(...)` shell substitution into a scanned repository gains arbitrary command execution as the Renovate process, potentially exfiltrating CI/CD tokens, repository credentials, and internal network resources; a proof-of-concept screen recording demonstrating `/etc/passwd` exfiltration exists, and no public exploit identified at time of analysis for CISA KEV status.
Renovate's `minimumReleaseAge` supply-chain defense control is not enforced for digest-type dependency updates, allowing a newly published - potentially malicious - package digest to immediately trigger a pull request and CI pipeline execution before the configured stability waiting period elapses. All Renovate versions before 44.3.1 and Mend Renovate CE/EE images before 15.4.0 are affected when repositories combine the `minimumReleaseAge` setting with digest-pinned dependencies such as GitHub Actions commit SHAs, Docker images, Go modules, or NuGet packages. No public exploit has been identified at time of analysis, but the flaw directly undermines an intentionally configured supply-chain defense, making it high-priority for organizations that depend on this control.
Environment variable exposure in Renovate (versions 42.68.1 through 42.96.3 and 43.0.0 through 43.4.4) leaks the full process environment - including privileged credentials - into every child process spawned during dependency update operations. The regression was introduced inadvertently on 2025-12-30 when Renovate migrated to the `execa` library, whose default behavior extends rather than replaces environment variables, silently bypassing Renovate's intended allowlist filtering. Both insider attackers (with repository write access) and outsider attackers (via supply-chain compromise of a processed dependency) can embed credential-harvesting code in scripts that Renovate executes, exfiltrating GitHub tokens, registry credentials, and cloud IAM keys accessible to the deployment. No public exploit has been identified at time of analysis, but the vendor explicitly recommends rotating all credentials that affected Renovate instances had access to.
Remote code execution in Renovate's bazel-module and bazelisk managers exposes self-hosted instances running versions 43.65.0 through 43.102.11 to arbitrary code execution triggered by malicious Bazel dependencies. When lockFileMaintenance invokes 'bazel mod deps', dependency-provided code within ctx.execute statements executes directly on the Renovate host - enabling both insider and outsider supply chain attacks against affected configurations. No public exploit code has been identified at time of analysis, and a vendor-confirmed patch is available at 43.102.11.