CVE-2024-58376 in Renovateinformación

Resumen

por MITRE • 2026-08-19

Renovate versions 37.158.0 before 37.199.0 contain a command injection vulnerability in the helmv3 manager's registryAliases handling that allows attackers with commit access to execute arbitrary commands. Attackers can manipulate registryAliases keys with unquoted shell metacharacters to inject commands executed during helm repo add operations, gaining full access to Renovate's execution environment.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-08-16

Divulgación

2026-08-19

Moderación

aceptado

Artículo

VDB-393061

CPE

listo

EPSS

0.01671

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2024-58376
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-58376
CVE Detailshttps://www.cvedetails.com/cve/CVE-2024-58376/

◂ AnteriorVisión De ConjuntoPróximo ▸

Interested in the pricing of exploits?

See the underground prices here!