CVE-2026-42075

{
  "id": "CVE-2026-42075",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-04T17:16:24.283",
  "lastModified": "2026-10-26T19:10:00.163",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-provided paths without validation, enabling directory traversal attacks that can overwrite critical system files or create files in sensitive location. This issue has been patched in version 1.69.3."
    },
    {
      "lang": "es",
      "value": "Evolver es un motor autoevolutivo impulsado por GEP para agentes de IA. Antes de la versión 1.69.3, una vulnerabilidad de salto de ruta en el comando de descarga de habilidades (fetch) permite a los atacantes escribir archivos en ubicaciones arbitrarias del sistema de archivos. El indicador --out= acepta rutas proporcionadas por el usuario sin validación, lo que permite ataques de salto de directorio que pueden sobrescribir archivos críticos del sistema o crear archivos en una ubicación sensible. Este problema ha sido parcheado en la versión 1.69.3."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "EvoMap",
          "product": "evolver",
          "versions": [
            {
              "version": "< 1.69.3",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-04T17:14:53.252083Z",
          "id": "CVE-2026-42075",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/EvoMap/evolver/releases/tag/v1.69.3",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/EvoMap/evolver/security/advisories/GHSA-r466-rxw4-3j9j",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/EvoMap/evolver/security/advisories/GHSA-r466-rxw4-3j9j",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}