PT-2026-5442 · Orval · Orval

K14Uz · Publicado 2026-01-21 · Atualizado 2026-03-11 · CVE-2026-25141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orval versions 7.19.0 through 7.20.9 Orval versions 8.0.0 through 8.1.9

Description Orval, a tool that generates type-safe JavaScript clients from OpenAPI specifications, is affected by a code injection issue. The jsStringEscape function does not adequately sanitize input, allowing attackers to inject and execute arbitrary JavaScript code using a limited set of characters, including []()!+. This is achieved through a technique known as JSFuck, which enables code execution without relying on alphanumeric characters or quotes.

Recommendations Update to Orval version 7.21.0 or later. Update to Orval version 8.2.0 or later.

Exploit

Correção

Command Injection

Code Injection

Enumeração de Fraquezas

CWE-84

CWE-77

CWE-94

Identificadores relacionados

CVE-2026-25141

GHSA-GCH2-PHQH-FG9Q

GHSA-H526-WF6G-67JV

Produtos afetados

Orval

Referências · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25141.json · Exploit
• https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv · Aviso do Fabricante
• https://github.com/orval-labs/orval/security/advisories/GHSA-gch2-phqh-fg9q · Aviso do Fabricante
• https://github.com/orval-labs/orval · Nota
• https://github.com/orval-labs/orval/releases/tag/v8.2.0 · Nota
• https://github.com/orval-labs/orval/blob/02211fc413524be340ba9ace866a2ef68845ca7c/packages/core/src/utils/string.ts#L227 · Nota
• https://github.com/orval-labs/orval/releases/tag/v7.21.0 · Nota
• https://github.com/orval-labs/orval/releases/tag/v7.19.0 · Nota
• https://github.com/orval-labs/orval/commit/9e5d93533904936678ba93b5d20f6bca176a4e1e · Nota
• https://github.com/orval-labs/orval/releases/tag/v8.0.2 · Nota
• https://t.me/cveNotify/153554 · Publicação no Telegram
• https://t.me/pentestingnews/72855 · Publicação no Telegram
• https://twitter.com/0dayPublishing/status/2017333606847291647 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-h526-wf6g-67jv · Aviso do Fabricante
• https://t.me/CVEtracker/43325 · Publicação no Telegram