Lumiverse, an AI chat application by prolix-oc, contained an OS command injection vulnerability (CWE-78) in versions before 0.9.7. The Spindle extension build pipeline executed 'bun install' without disabling lifecycle scripts, enabling malicious extensions to run arbitrary host-level commands during installation. This occurs before the static backend safety scan, allowing code execution prior to inspection of the distributed files. The vulnerability has a CVSS 3.1 score of 9.1 (critical) with network attack vector, low attack complexity, high privileges required, no user interaction, and complete confidentiality, integrity, and availability impact. The issue is resolved in Lumiverse 0.9.7.

Successful exploitation allows an attacker to achieve host-level code execution with administrative privileges during extension installation, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at this time.

Upgrade Lumiverse to version 0.9.7 or later, where this vulnerability is fixed by adding the --ignore-scripts flag to the 'bun install' command in the Spindle extension build pipeline. Until upgraded, avoid installing untrusted extensions and review extension package.json files for malicious lifecycle scripts before installation. Patch status is confirmed fixed in version 0.9.7.