Cu64

**Name of the Vulnerable Software and Affected Versions** Lumiverse versions prior to 0.9.7 **Description** The `consumeNonce()` function only verifies that a module-level variable is set and has not expired, failing to validate values from the incoming HTTP request or bind the nonce to the administrator's session. If an `auth.api.signUpEmail()` call fails before the before hook executes—such as when BetterAuth rejects a duplicate email—the nonce remains set but is not consumed. This allows any POST request to the '/api/auth/sign-up/email' endpoint arriving within the 10-second window to register successfully, regardless of the sender. An attacker capable of predicting or observing when an administrator attempts to create a duplicate user can exploit this race condition to register an unauthorized account. **Recommendations** Update to version 0.9.7.

**Name of the Vulnerable Software and Affected Versions** Lumiverse versions prior to 0.9.7 **Description** The Spindle extension build pipeline executes `bun install` without the `--ignore-scripts` flag before performing the static backend safety scan via the `assertSafeBackendBundle()` function. This allows a malicious extension containing a `package.json` file with `preinstall`, `postinstall`, or `prepare` lifecycle scripts to achieve host-level code execution when an administrator initiates the installation process, occurring before any distribution files are inspected. **Recommendations** Update to version 0.9.7.

**Name of the Vulnerable Software and Affected Versions** Lumiverse versions prior to 0.9.7 **Description** An issue exists where the application fails to properly validate the basename of a path when the `toSmbPath(fullPath)` function throws an exception. In this fallback scenario, the basename is concatenated directly into an `smbclient -c` script. Because `smbclient` treats the semicolon (;) as a subcommand separator and the exclamation mark (!) as a local-shell escape, an attacker can provide a path with a malicious basename to achieve arbitrary command execution on the server. **Recommendations** Update to version 0.9.7.

**Name of the Vulnerable Software and Affected Versions** Lumiverse versions prior to 0.9.7 **Description** An issue exists in the MCP server creation endpoint where the `command` field is validated against an allowlist of binary names, but the `args` array is forwarded to the child process without validation. Since binaries on the allowlist support inline-code execution flags (such as `-e` for node/bun and `-c` for python3/deno), any authenticated user can achieve arbitrary OS-level code execution on the server. The route only requires `requireAuth` and does not require `requireOwner`. Additionally, the server binds to all interfaces (::), and the host-header rebinding check can be bypassed by sending `Host: localhost:<port>`, allowing exploitation from any machine with network access to the server port. **Recommendations** Update Lumiverse to version 0.9.7.

**Name of the Vulnerable Software and Affected Versions** Lumiverse versions prior to 0.9.7 **Description** The component override system transpiles user-supplied TSX using Sucrase and evaluates it via `new Function`. To prevent malicious execution, the system attempts to shadow dangerous globals such as `fetch`, `window`, and `eval` by setting them to undefined and uses a static source validator, `validateComponentOverrideSource()`, to block these identifiers using word-boundary regex. However, both controls can be bypassed. The static validator can be evaded by reconstructing blocked identifiers from string fragments at runtime. Additionally, a sandbox escape is possible using `useRef` and `useEffect`; by attaching a ref to a rendered element, an attacker can obtain a live DOM node and access the real window object via `node['ownerDoc'+'ument']['def'+'aultView']`. This allows the execution of arbitrary code within an authenticated session when a victim imports and enables a malicious theme pack (.lumitheme or .lumiverse-theme) in the Theme Editor. **Recommendations** Update Lumiverse to version 0.9.7.