9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-j5w5-568x-rq53

GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary

A command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command using string concatenation and passes it to execSync() without proper sanitization, enabling remote code execution when the corpus parameter contains shell metacharacters.

Details

The vulnerability exists in src/gep/signals.js at lines 260-274:

// src/gep/signals.js:260-274
function _extractLLM(corpus, nodeSecret, hubUrl) {
  // ...
  var url = getHubUrl(hubUrl) + '/gep/extract';
  var postData = JSON.stringify({ corpus_summary: summary });
  
  // VULNERABLE: String concatenation into shell command
  var curlCmd = 'curl -s -m 10 -X POST'
    + ' -H "Content-Type: application/json"'
    + ' -H "Authorization: Bearer ' + nodeSecret + '"'
    + ' -d ' + JSON.stringify(postData).replace(/'/g, "'\\''")
    + ' ' + JSON.stringify(url);

  // VULNERABLE: Executes shell command
  stdout = execSync(curlCmd, { timeout: 12000, encoding: 'utf8' });
  // ...
}

The corpus parameter is derived from user input (via userSnippet in extractSignals() function) and flows through to _extractLLM() where it becomes part of the shell command. While JSON.stringify() escapes some characters, it does not prevent shell command substitution via $(...) syntax when the resulting string is passed to execSync().

The extractSignals() function is called from the main evolution loop in src/gep/evolver.js, which processes user snippets and session transcripts.

PoC

Prerequisites:

Node.js installed
Access to the evolver application

Steps to reproduce:

Create a test file that simulates the vulnerable code path:

Miggo Vulnerability Database

→

GHSA-j5w5-568x-rq53

GHSA-j5w5-568x-rq53:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
@evomap/evolver	npm	< 1.69.3	1.69.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis is based on the detailed security advisory GHSA-j5w5-568x-rq53. The advisory identifies a command injection vulnerability in the @evomap/evolver package. The root cause is the _extractLLM function within src/gep/signals.js, which unsafely constructs a shell command using the corpus parameter and executes it via child_process.execSync. The corpus parameter originates from the userSnippet argument of the extractSignals function, which serves as the entry point for the malicious payload. An attacker can provide shell metacharacters (e.g., $(...)) in the input to achieve remote code execution. The provided patch commits contained obfuscated code, making direct diff analysis impossible. Therefore, the identification of vulnerable functions relies on the explicit and detailed information from the advisory's description, which includes the vulnerable code snippets and the data flow.

Vulnerable functions

_extractLLM

src/gep/signals.js

This function constructs a shell command using string concatenation with the 'corpus' parameter, which is derived from user input. It then executes this command using 'execSync'. This allows an attacker to inject arbitrary shell commands by including shell metacharacters in the 'corpus' input, leading to remote code execution.

extractSignals

src/gep/signals.js

This function serves as an entry point for the vulnerability. It takes user-provided input ('userSnippet') and passes it to the `_extractLLM` function as the 'corpus' parameter without proper sanitization. An attacker can control this input to exploit the command injection vulnerability in `_extractLLM`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

9.8

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary

Details

PoC

GHSA-j5w5-568x-rq53:

9.8

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Detect and Respond To Threats Faster.

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

Technical Details

9.8

9.8

GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary

Details

PoC

Impact

9.8

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary

Details

PoC

GHSA-j5w5-568x-rq53:

9.8

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

Technical Details

9.8

9.8

GHSA-j5w5-568x-rq53: Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Summary

Details

PoC

Impact

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI