{"data":{"id":"9248bd4e-7bf2-444d-b474-2037456645c5","title":"CVE-2025-49619: Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks…","summary":"CVE-2025-49619 affects Skyvern through 0.1.85. Improper sanitization of Jinja2 template input in the Prompt field of workflow blocks, such as the Navigation v2 Block, lets authenticated users inject crafted expressions that the server evaluates. The flaw is classified as CWE-1336 and can lead to blind remote code execution.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-49619","publishedAt":"2025-06-07T14:15:21.573Z","cveId":"CVE-2025-49619","cweIds":["CWE-1336"],"cvssScore":"8.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["skyvern@<= 0.2.0"],"affectedPackageNames":["skyvern"],"affectedPackageRefs":["pypi:skyvern"],"affectedVendors":[],"affectedVendorsRaw":["Skyvern"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Skyvern server-side template injection in workflow block Prompt field","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.21806,"epssCheckedAt":"2026-11-04T12:08:34.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-h92g-3xc3-ww2r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:38.286Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}