CVE-2026-42076criticalCWE-78

CVE-2026-42076: fallo crítico en EvoMap evolver

Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear evolver+ Monitorear @evomap/evolver

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.8epss 1.7%
Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command using string concatenation and passes it to execSync() without proper sanitization, enabling remote code execution when the corpus parameter contains shell metacharacters. This issue has been patched in version 1.69.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
EvoMap · evolver
CVEs relacionadas — EvoMap evolver

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-42075HIGHEvolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File WriteEPSS 0.6%CVE-2026-42077MEDIUMEvolver: Prototype Pollution via `Object.assign()` in mailbox store operationsEPSS 0.2%