CVE-2025-49619

HighCVSS 8.5/10Last modified Jun 17, 2026

Description

Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Weakness enumeration

CWE-1336

Affected software

No affected versions have been published.

Timeline

Published: Jun 7, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-49627.7An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Lunary API, affecting ve CVE-2025-49636.4The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including,CVE-2025-496307.5In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by CVE-2025-49644.9The WP Online Users Stats plugin for WordPress is vulnerable to time-based SQL Injection via the ‘table_name’ parameter in all versions up t CVE-2025-496414.3A regular Zabbix user with no permission to the Monitoring -> Problems view is still able to call the problem.view.refresh action and theref CVE-2025-496425.9Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory.CVE-2025-496436.5An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted para CVE-2025-49655.4The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid Builder feat CVE-2025-496518.1Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data acce CVE-2025-496529.8Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access priv CVE-2025-496538.0Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management pla CVE-2025-496559.8Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabl