{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2026-8767","sourceIdentifier":"cna@vuldb.com","published":"2026-05-17T23:17:02.810","lastModified":"2026-10-14T20:10:00.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"es","value":"Se ha encontrado una vulnerabilidad en vercel ai hasta la versión 3.0.97. La función 'run' del archivo .github/workflows/prettier-on-automerge.yml del componente PR Branch Name Interpolation se ve afectada. La manipulación conduce a una inyección de comandos del sistema operativo. El ataque puede iniciarse de forma remota. La complejidad de un ataque es bastante alta. La explotabilidad se considera difícil. El exploit ha sido divulgado al público y puede ser utilizado. El proveedor fue contactado con antelación sobre esta divulgación, pero no respondió de ninguna manera."}],"affected":[{"source":"cna@vuldb.com","affectedData":[{"vendor":"vercel","product":"ai","cpes":["cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*"],"modules":["PR Branch Name Interpolation"],"versions":[{"version":"3.0.0","status":"affected"},{"version":"3.0.1","status":"affected"},{"version":"3.0.2","status":"affected"},{"version":"3.0.3","status":"affected"},{"version":"3.0.4","status":"affected"},{"version":"3.0.5","status":"affected"},{"version":"3.0.6","status":"affected"},{"version":"3.0.7","status":"affected"},{"version":"3.0.8","status":"affected"},{"version":"3.0.9","status":"affected"},{"version":"3.0.10","status":"affected"},{"version":"3.0.11","status":"affected"},{"version":"3.0.12","status":"affected"},{"version":"3.0.13","status":"affected"},{"version":"3.0.14","status":"affected"},{"version":"3.0.15","status":"affected"},{"version":"3.0.16","status":"affected"},{"version":"3.0.17","status":"affected"},{"version":"3.0.18","status":"affected"},{"version":"3.0.19","status":"affected"},{"version":"3.0.20","status":"affected"},{"version":"3.0.21","status":"affected"},{"version":"3.0.22","status":"affected"},{"version":"3.0.23","status":"affected"},{"version":"3.0.24","status":"affected"},{"version":"3.0.25","status":"affected"},{"version":"3.0.26","status":"affected"},{"version":"3.0.27","status":"affected"},{"version":"3.0.28","status":"affected"},{"version":"3.0.29","status":"affected"},{"version":"3.0.30","status":"affected"},{"version":"3.0.31","status":"affected"},{"version":"3.0.32","status":"affected"},{"version":"3.0.33","status":"affected"},{"version":"3.0.34","status":"affected"},{"version":"3.0.35","status":"affected"},{"version":"3.0.36","status":"affected"},{"version":"3.0.37","status":"affected"},{"version":"3.0.38","status":"affected"},{"version":"3.0.39","status":"affected"},{"version":"3.0.40","status":"affected"},{"version":"3.0.41","status":"affected"},{"version":"3.0.42","status":"affected"},{"version":"3.0.43","status":"affected"},{"version":"3.0.44","status":"affected"},{"version":"3.0.45","status":"affected"},{"version":"3.0.46","status":"affected"},{"version":"3.0.47","status":"affected"},{"version":"3.0.48","status":"affected"},{"version":"3.0.49","status":"affected"},{"version":"3.0.50","status":"affected"},{"version":"3.0.51","status":"affected"},{"version":"3.0.52","status":"affected"},{"version":"3.0.53","status":"affected"},{"version":"3.0.54","status":"affected"},{"version":"3.0.55","status":"affected"},{"version":"3.0.56","status":"affected"},{"version":"3.0.57","status":"affected"},{"version":"3.0.58","status":"affected"},{"version":"3.0.59","status":"affected"},{"version":"3.0.60","status":"affected"},{"version":"3.0.61","status":"affected"},{"version":"3.0.62","status":"affected"},{"version":"3.0.63","status":"affected"},{"version":"3.0.64","status":"affected"},{"version":"3.0.65","status":"affected"},{"version":"3.0.66","status":"affected"},{"version":"3.0.67","status":"affected"},{"version":"3.0.68","status":"affected"},{"version":"3.0.69","status":"affected"},{"version":"3.0.70","status":"affected"},{"version":"3.0.71","status":"affected"},{"version":"3.0.72","status":"affected"},{"version":"3.0.73","status":"affected"},{"version":"3.0.74","status":"affected"},{"version":"3.0.75","status":"affected"},{"version":"3.0.76","status":"affected"},{"version":"3.0.77","status":"affected"},{"version":"3.0.78","status":"affected"},{"version":"3.0.79","status":"affected"},{"version":"3.0.80","status":"affected"},{"version":"3.0.81","status":"affected"},{"version":"3.0.82","status":"affected"},{"version":"3.0.83","status":"affected"},{"version":"3.0.84","status":"affected"},{"version":"3.0.85","status":"affected"},{"version":"3.0.86","status":"affected"},{"version":"3.0.87","status":"affected"},{"version":"3.0.88","status":"affected"},{"version":"3.0.89","status":"affected"},{"version":"3.0.90","status":"affected"},{"version":"3.0.91","status":"affected"},{"version":"3.0.92","status":"affected"},{"version":"3.0.93","status":"affected"},{"version":"3.0.94","status":"affected"},{"version":"3.0.95","status":"affected"},{"version":"3.0.96","status":"affected"},{"version":"3.0.97","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":1.3,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":5.0,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":1.6,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":5.9}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:P/I:P/A:P","baseScore":4.6,"accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-18T14:30:43.479216Z","id":"CVE-2026-8767","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"cna@vuldb.com","type":"Secondary","description":[{"lang":"en","value":"CWE-77"},{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.97","matchCriteriaId":"9C80CA5C-3BEC-499F-85D5-5E81491D37D6"}]}]}],"references":[{"url":"https://gist.github.com/YLChen-007/870bd6966cd84703d91ce54dfea3bdd0","source":"cna@vuldb.com","tags":["Exploit","Third Party Advisory"]},{"url":"https://vuldb.com/submit/811402","source":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/vuln/364392","source":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://vuldb.com/vuln/364392/cti","source":"cna@vuldb.com","tags":["Permissions Required","VDB Entry"]}]}}