Threats affecting pkg:github/nationalsecurityagency/emissary

Emissary is a P2P based data-driven workflow engine. In versions 8.42.0 and below, Executrix.getCommand() is vulnerable to OS command injection because it interpolates temporary file paths into a /bin/sh -c shell command string without any escaping or input validation. The IN_FILE_ENDING and OUT_FILE_ENDING configuration keys flow directly into these paths, allowing a place author who can write or modify a .cfg file to inject arbitrary shell metacharacters that execute OS commands in the JVM process's security context. The framework already sanitizes placeName via an allowlist before embedding it in the same shell string, but applies no equivalent sanitization to file ending values. No runtime privileges beyond place configuration authorship, and no API or network access, are required to exploit this vulnerability. This is a framework-level defect with no safe mitigation available to downstream implementors, as Executrix provides neither escaping nor documented preconditions against metacharacters in file ending inputs. This issue has been fixed in version 8.43.0.

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint (/api/configuration/{name}) validated configuration names using a blacklist approach that checked for \, /, .., and trailing .. This could potentially be bypassed using URL-encoded variants, double-encoding, or Unicode normalization to achieve path traversal and read configuration files outside the intended directory. This vulnerability is fixed in 8.39.0.

CVE-2026-35581 is an OS command injection vulnerability in the NationalSecurityAgency's Emissary product prior to version 8.39.0. The Executrix utility class improperly sanitizes the PLACE_NAME parameter by only replacing spaces with underscores, allowing shell metacharacters to be injected into commands executed via /bin/sh -c. This flaw enables an attacker with high privileges to execute arbitrary commands with high impact on confidentiality, integrity, and availability. The vulnerability is fixed in version 8.39.0. No official patch link or vendor advisory is provided in the data, and no known exploits are reported in the wild.

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.

CVE-2026-35571 is a stored cross-site scripting (XSS) vulnerability in the NationalSecurityAgency's Emissary product prior to version 8.39.0. The issue arises because Mustache navigation templates interpolate configuration-controlled link values directly into href attributes without validating the URL scheme. An administrator with the ability to modify the navItems configuration can inject javascript: URIs, leading to XSS attacks against other authenticated users of the Emissary web interface. This vulnerability has a medium severity with a CVSS score of 4.8. The vulnerability is fixed in Emissary version 8.39.0.