CVE-2025-49619

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-49619
Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).

8.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://cristibtz.github.io/posts/CVE-2025-49619/
https://github.com/Skyvern-AI/skyvern/commit/db856cd8433a204c8b45979c70a4da1e119d949d
https://www.exploit-db.com/exploits/52335
https://cristibtz.blog/posts/CVE-2025-49619/
Configurations

No configuration.

History

15 Apr 2026, 00:35

Type Values Removed Values Added
Summary (es) Skyvern hasta la versión 0.1.85 tiene una fuga de tiempo de ejecución de Jinja en sdk/workflow/models/block.py. (es) Skyvern, hasta la versión 0.1.85, es vulnerable a server-side template injection (SSTI) en el campo Prompt de bloques de flujo de trabajo, como el bloque Navigation v2. La depuración incorrecta de la entrada de plantilla de Jinja2 permite a los usuarios autenticados inyectar expresiones manipuladas que se evalúan en el servidor, lo que provoca la ejecución remota de código (RCE) a ciegas.

17 Jun 2025, 21:15

Type Values Removed Values Added
Summary (en) Skyvern through 0.1.85 has a Jinja runtime leak in sdk/workflow/models/block.py. (en) Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).

17 Jun 2025, 19:15

Type Values Removed Values Added
References
  • () https://www.exploit-db.com/exploits/52335 -

09 Jun 2025, 16:15

Type Values Removed Values Added
References
  • () https://cristibtz.blog/posts/CVE-2025-49619/ -
Summary
  • (es) Skyvern hasta la versión 0.1.85 tiene una fuga de tiempo de ejecución de Jinja en sdk/workflow/models/block.py.

07 Jun 2025, 21:15

Type Values Removed Values Added
References
  • () https://cristibtz.github.io/posts/CVE-2025-49619/ -

07 Jun 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-07 14:15

Updated : 2026-04-15 00:35

NVD link : CVE-2025-49619

Mitre link : CVE-2025-49619

CVE.ORG link : CVE-2025-49619

JSON object : View

Products Affected

No product.

CWE
CWE-1336

Improper Neutralization of Special Elements Used in a Template Engine