PT-2026-5442 · Orval · Orval

K14Uz · Published 2026-01-21 · Updated 2026-03-11 · CVE-2026-25141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Orval versions 7.19.0 through 7.20.9 Orval versions 8.0.0 through 8.1.9

Description Orval, a tool that generates type-safe JavaScript clients from OpenAPI specifications, is affected by a code injection issue. The jsStringEscape function does not adequately sanitize input, allowing attackers to inject and execute arbitrary JavaScript code using a limited set of characters, including []()!+. This is achieved through a technique known as JSFuck, which enables code execution without relying on alphanumeric characters or quotes.

Recommendations Update to Orval version 7.21.0 or later. Update to Orval version 8.2.0 or later.

Exploit

Fix

Command Injection

Code Injection

Weakness Enumeration

CWE-84

CWE-77

CWE-94

Related Identifiers

CVE-2026-25141

GHSA-GCH2-PHQH-FG9Q

GHSA-H526-WF6G-67JV

Affected Products

Orval

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25141.json · Exploit
• https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv · Vendor Advisory
• https://github.com/orval-labs/orval/security/advisories/GHSA-gch2-phqh-fg9q · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h526-wf6g-67jv · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gch2-phqh-fg9q · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23947 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-25141 · Security Note
• https://github.com/orval-labs/orval · Note
• https://github.com/orval-labs/orval/releases/tag/v8.2.0 · Note
• https://github.com/orval-labs/orval/blob/02211fc413524be340ba9ace866a2ef68845ca7c/packages/core/src/utils/string.ts#L227 · Note
• https://github.com/orval-labs/orval/releases/tag/v7.21.0 · Note
• https://github.com/orval-labs/orval/releases/tag/v7.19.0 · Note
• https://github.com/orval-labs/orval/commit/9e5d93533904936678ba93b5d20f6bca176a4e1e · Note
• https://github.com/orval-labs/orval/releases/tag/v8.0.2 · Note