This vulnerability involves OS command injection in the 'run' function of the .github/workflows/prettier-on-automerge.yml file within vercel ai up to version 3.0.97. The issue arises from improper handling of PR branch name interpolation, allowing remote attackers to inject operating system commands. The attack requires high complexity and is difficult to exploit. The vulnerability was disclosed publicly, but no vendor response or patch is currently available. The CVSS 4.0 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and low impact on confidentiality, integrity, and availability.

Successful exploitation could allow remote attackers to execute arbitrary OS commands on affected systems via the vulnerable function. However, the attack complexity is high and exploitability is difficult, limiting the likelihood of widespread exploitation. The impact on confidentiality, integrity, and availability is low according to the CVSS score. No known exploits are reported in the wild. The vendor has not issued any fix or mitigation guidance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider restricting access to the vulnerable functionality and carefully validate or sanitize inputs related to PR branch name interpolation in the affected workflow file. Monitor for any future vendor advisories or patches addressing this issue.