29 matches found
CVE-2025-49619
CVE-2025-49619 PoC This script exploits CVE-2025-49619 in Skyvern to execute a reverse shell command. Author Name: Cristian Branet GitHub: cristibtz Usage 1. Start a listener root@kitploit: nc -lvnp 2. Run the exploit root@kitploit: python3 exploit.py -u "http://:" -k "" -i -p : Skyvern server IP...
skyvern
🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉...
skyvern
🐉 LLM과 컴퓨터 비전으로 브라우저 기반 워크플로우 자동화 🐉...
CVE-2026-82447
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...
EUVD-2026-68096
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...
CVE-2026-82447 Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...
CVE-2026-82447 Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through workflow parameters or upstream block...
CVE-2026-82447
Skyvern versions prior to 1.0.45 contain a sandbox escape vulnerability in the TextPromptBlock component. The root cause is a double-rendering flaw: prompts are first processed through a sandboxed Jinja environment and then re-processed through an unsandboxed one. An attacker with low privileges ...
PYSEC-2026-1929 Skyvern has a Jinja runtime leak
Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py...
📄 Skyvern 0.1.84 Template Injection / Code Execution
Skyvern version 0.1.84 remote code execution proof of concept exploit that leverages a vulnerability in workflow creation functionality where user-supplied input in the prompt field is processed through Jinja2 templating engine without proper sanitization, allowing attackers to execute arbitrary...
VulnCheck KEV: CVE-2025-49619
Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...
Skyvern 0.1.85 Server-Side Template Injection
Proof of concept exploit that leverages a server-side template injection flaw in Skyvern versions up to 0.1.85 to launch a reverse shell...
📄 Skyvern 0.1.84 SSTI Remote Code Execution
This Metasploit module exploits a server-side template injection vulnerability in Skyvern versions 0.1.84 and below. The module requires an API key to deliver requests and upload the malicious workflow. This module requires Metasploit: https://metasploit.com/download Current source:...
📄 Skyvern 0.1.85 Remtoe Code Execution / SSTI
Skyvern version 0.1.85 suffers from a remote code execution vulnerability via server-side template injection. Exploit Title: Skyvern 0.1.85 - Remote Code Execution RCE via SSTI Date: 2025-06-15 Exploit Author: Cristian Branet Vendor Homepage: https://www.skyvern.com/ Software Link:...
Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
Exploit Title: Skyvern 0.1.85 - Remote Code Execution RCE via SSTI Date: 2025-06-15 Exploit Author: Cristian Branet Vendor Homepage: https://www.skyvern.com/ Software Link: https://github.com/Skyvern-AI/skyvern Version: Settings - API Key - Reveal and copy the API key" parser.addargument"-i",...
Ttemplate Injection
skyvern is vulnerable to Template injection . The vulnerability is due to improper handling of Jinja templates in sdk/workflow/models/block.py, which allows unintended data to be exposed at runtime...
Exploit for CVE-2025-49619
CVE-2025-49619 PoC --- This script exploits CVE-2025-49619...
CVE-2025-49619
Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...
