{"data":{"id":"9fd3633e-ac89-4baf-9e6f-19ad259479a2","title":"CVE-2026-42076: Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability…","summary":"CVE-2026-42076 affects Evolver, a GEP-powered self-evolving engine for AI agents, prior to version 1.69.3. A command injection flaw in the _extractLLM() function builds a curl command by string concatenation and passes it to execSync() without sanitization. When the corpus parameter contains shell metacharacters, an attacker can execute arbitrary shell commands on the server, classified as CWE-78.","solution":"This issue has been patched in version 1.69.3.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42076","publishedAt":"2026-05-04T17:16:24.440Z","cveId":"CVE-2026-42076","cweIds":["CWE-78"],"cvssScore":"9.8","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@evomap/evolver@< 1.69.3 (fixed: 1.69.3)"],"affectedPackageNames":["@evomap/evolver"],"affectedPackageRefs":["npm:@evomap/evolver"],"affectedVendors":[],"affectedVendorsRaw":["Evolver"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Evolver command injection in _extractLLM() via corpus parameter","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.01705,"epssCheckedAt":"2026-11-09T18:09:53.339Z","kevDateAdded":null,"advisoryAliases":["GHSA-j5w5-568x-rq53"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:55.571Z","patchAvailable":true,"disclosureDate":"2026-05-04T17:16:24.440Z","fixReleasedAt":"2026-04-20T01:23:02.554Z","daysToFix":-14,"fixCheckedAt":"2026-10-29T21:37:01.731Z","capecIds":["CAPEC-88"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@evomap/evolver","fixedVersion":"1.69.3","matchedVersion":"1.69.3","fixReleasedAt":"2026-04-20T01:23:02.554Z","daysToFix":-14,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:01.582Z"}]}}