ExploitPublished 15 Jun 2025

Skyvern 0.1.85 · Remote Code Execution (RCE) via SSTI

Source Exploit-DB RSS Feed

Severity

Critical

Rated by Threat Radar

Data as of 21 Jun 2025, 23:58 UTC

What to do

AI-suggested

Given the absence of an official patch, European organizations should implement immediate compensating controls. First, conduct a thorough inventory to identify all instances of Skyvern 0.1.85 in use. Employ strict input validation and sanitization on all user-supplied data that interacts with template engines to prevent injection. Deploy Web Application Firewalls (WAFs) with custom rules to detect and block SSTI payload patterns, especially those targeting Skyvern. Monitor network traffic and server logs for unusual template-related errors or suspicious command execution attempts. Isolate vulnerable systems within segmented network zones to limit potential lateral movement. Consider temporary disabling or restricting access to affected services until a patch is available. Engage with vendors or the open-source community for updates or unofficial patches. Finally, conduct security awareness training for developers to avoid unsafe template usage in future deployments.

Description

Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI

Impact

For European organizations, this vulnerability poses a significant threat, especially those relying on Skyvern 0.1.85 in their web infrastructure. Successful exploitation can lead to full system compromise, data breaches, service disruption, and lateral movement within corporate networks. Confidential information, including personal data protected under GDPR, could be exposed or manipulated, resulting in regulatory penalties and reputational damage. Critical sectors such as finance, healthcare, and government agencies are particularly at risk due to their reliance on secure web applications and the sensitivity of their data. Additionally, the ability to execute arbitrary code remotely without authentication increases the attack surface and lowers the barrier for attackers, including cybercriminals and state-sponsored actors. The absence of known exploits in the wild currently provides a limited window for proactive defense, but the availability of exploit code suggests this may change rapidly.

Indicators of compromise

Exploit source code

Exploit code for Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI4,571 characters

# Exploit Title: Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI
# Date: 2025-06-15
# Exploit Author: Cristian Branet
# Vendor Homepage: https://www.skyvern.com/
# Software Link: https://github.com/Skyvern-AI/skyvern
# Version: < 0.1.85, before commit db856cd
# Tested on: Skyvern Cloud app / Local Skyvern (Linux Ubuntu 22.04)
# CVE : CVE-2025-49619
# Article: https://cristibtz.github.io/posts/CVE-2025-49619/

'''
Skyvern's Workflow Editor allows prompt injection via Jinja2 template syntax.…

References

Community reviews

Loading reviews…