The @evomap/evolver validator sandbox executor includes 'npm' and 'npx' in its hardcoded executable allowlist, enabling remote code execution (RCE) via Hub-delivered validation tasks. The validator daemon fetches validation commands from the Hub without verifying the response signature, allowing an attacker controlling or man-in-the-middling the Hub to execute arbitrary code on validator nodes. The sandbox does not restrict 'npm' or 'npx' commands, which can run lifecycle scripts or remote binaries, leading to full code execution with the validator process's permissions. This vulnerability affects versions prior to 1.70.0-beta.5 and is patched in that release.