Lucene search
+L

12 matches found

Cvelist
Cvelist
added 2026/05/04 4:48 p.m.109 views

CVE-2026-42076 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the extractLLM function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command using string concatenation and passes it to...

9.8CVSS0.01305EPSS
SaveExploits0References2
Rows per page
Query Builder