VDB
CVE-2025-49619
CVE-2025-49619
PUBLISHED
CVSS 8.5 HIGH
Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).
EPSS 20.59% · 97.3th percentile
Risk Scores
CVSS 3.1
8.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
EPSS Score
20.59%
97.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| PyPI | skyvern | 0, 0 |
| Skyvern | Skyvern | 0, 0 |
Timeline
- Jan 21, 1970 VulnCheck XDB Entry
- Jan 21, 1970 Exploit-DB Entry
- Oct 11, 2022 CrowdSec Sighting
- Feb 7, 2023 CrowdSec Sighting
- Aug 15, 2024 CrowdSec Sighting
- Jun 7, 2025 CVE Published
- Jun 7, 2025 PoC Published
- Jun 8, 2025 EPSS Score
- Jun 16, 2025 Coalition ESS Score
- Jun 16, 2025 PoC Published
- Jun 17, 2025 CVE Updated
- Jun 18, 2025 Coalition ESS Score
References
- https://cristibtz.github.io/posts/CVE-2025-49619/ url
- https://cristibtz.blog/posts/CVE-2025-49619/ exploit
- https://github.com/Skyvern-AI/skyvern/commit/db856cd8433a204c8b45979c70a4da1e119d949d url
- https://github.com/Skyvern-AI/skyvern package
- https://www.exploit-db.com/exploits/52335 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-49619 advisory
- https://cristibtz.blog/posts/CVE-2025-49619 url
- https://cristibtz.github.io/posts/CVE-2025-49619 url