CVE-2026-23947

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23947", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-19T14:49:06.311Z", "datePublished": "2026-01-20T00:19:48.901Z", "dateUpdated": "2026-01-21T17:09:11.690Z"}, "containers": {"cna": {"title": "Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation", "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "lang": "en", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv"}, {"name": "https://github.com/orval-labs/orval/releases/tag/v8.0.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/orval-labs/orval/releases/tag/v8.0.2"}], "affected": [{"vendor": "orval-labs", "product": "orval", "versions": [{"version": ">= 8.0.0-rc.0, < 8.0.2", "status": "affected"}, {"version": "< 7.19.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-21T17:09:11.690Z"}, "descriptions": [{"lang": "en", "value": "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions prior to 7.19.0 until 8.0.2 are vulnerable to arbitrary code execution in environments consuming generated clients. This issue is similar in nature to CVE-2026-22785, but affects a different code path in @orval/core that was not addressed by CVE-2026-22785's fix. The vulnerability allows untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript code into generated clients via the x-enumDescriptions field, which is embedded without proper escaping in getEnumImplementation(). I have confirmed that the injection occurs during const enum generation and results in executable code within the generated schema files. Orval 7.19.0 and 8.0.2 contain a fix for the issue."}], "source": {"advisory": "GHSA-h526-wf6g-67jv", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-20T17:04:30.700710Z", "id": "CVE-2026-23947", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-20T17:04:37.834Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23947", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-20T17:04:30.700710Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-20T17:04:35.402Z"}}], "cna": {"title": "Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation", "source": {"advisory": "GHSA-h526-wf6g-67jv", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH"}}], "affected": [{"vendor": "orval-labs", "product": "orval", "versions": [{"status": "affected", "version": ">= 8.0.0-rc.0, < 8.0.2"}, {"status": "affected", "version": "< 7.19.0"}]}], "references": [{"url": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv", "name": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/orval-labs/orval/releases/tag/v8.0.2", "name": "https://github.com/orval-labs/orval/releases/tag/v8.0.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions prior to 7.19.0 until 8.0.2 are vulnerable to arbitrary code execution in environments consuming generated clients. This issue is similar in nature to CVE-2026-22785, but affects a different code path in @orval/core that was not addressed by CVE-2026-22785's fix. The vulnerability allows untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript code into generated clients via the x-enumDescriptions field, which is embedded without proper escaping in getEnumImplementation(). I have confirmed that the injection occurs during const enum generation and results in executable code within the generated schema files. Orval 7.19.0 and 8.0.2 contain a fix for the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-77", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-21T17:09:11.690Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23947", "state": "PUBLISHED", "dateUpdated": "2026-01-21T17:09:11.690Z", "dateReserved": "2026-01-19T14:49:06.311Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-20T00:19:48.901Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "orval", "vendor": "orval-labs", "versions": [{"status": "affected", "version": ">= 8.0.0-rc.0, < 8.0.2"}, {"status": "affected", "version": "< 7.19.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*", "matchCriteriaId": "0AAE568E-4A06-4EFF-8618-458703194D4F", "versionEndExcluding": "7.19.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:*", "matchCriteriaId": "37F5479C-90CE-43A1-A3F9-5FC8AA7BDBBD", "versionEndExcluding": "8.0.2", "versionStartIncluding": "8.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Versions prior to 7.19.0 until 8.0.2 are vulnerable to arbitrary code execution in environments consuming generated clients. This issue is similar in nature to CVE-2026-22785, but affects a different code path in @orval/core that was not addressed by CVE-2026-22785's fix. The vulnerability allows untrusted OpenAPI specifications to inject arbitrary TypeScript/JavaScript code into generated clients via the x-enumDescriptions field, which is embedded without proper escaping in getEnumImplementation(). I have confirmed that the injection occurs during const enum generation and results in executable code within the generated schema files. Orval 7.19.0 and 8.0.2 contain a fix for the issue."}, {"lang": "es", "value": "Orval genera clientes JS con seguridad de tipos (TypeScript) a partir de cualquier especificaci\u00f3n OpenAPI v3 o Swagger v2 v\u00e1lida. Las versiones anteriores a la 7.19.0 hasta la 8.0.2 son vulnerables a la ejecuci\u00f3n de c\u00f3digo arbitrario en entornos que consumen clientes generados. Este problema es similar en naturaleza a CVE-2026-22785, pero afecta a una ruta de c\u00f3digo diferente en @orval/core que no fue abordada por la correcci\u00f3n de CVE-2026-22785. La vulnerabilidad permite a especificaciones OpenAPI no confiables inyectar c\u00f3digo TypeScript/JavaScript arbitrario en clientes generados a trav\u00e9s del campo x-enumDescriptions, el cual se incrusta sin el escape adecuado en getEnumImplementation(). He confirmado que la inyecci\u00f3n ocurre durante la generaci\u00f3n de enumeraciones constantes y resulta en c\u00f3digo ejecutable dentro de los archivos de esquema generados. Orval 7.19.0 y 8.0.2 contienen una correcci\u00f3n para el problema."}], "id": "CVE-2026-23947", "lastModified": "2026-06-17T10:22:19.970", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23947", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-20T17:04:30.700710Z", "version": "2.0.3"}}]}, "published": "2026-01-20T01:15:57.583", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/orval-labs/orval/releases/tag/v8.0.2"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/orval-labs/orval/security/advisories/GHSA-h526-wf6g-67jv"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T15:47:57.899631+00:00", "value": {"mitigation_remediation": ["Upgrade Orval to version 7.19.0 or later (including 8.0.2) to apply the vendor patch", "Disable or thoroughly sanitize the use of the x-enumDescriptions field in OpenAPI specifications before feeding them to Orval", "Implement integrity checks in CI pipelines to detect unexpected code or modifications in generated client files", "Review and audit generated TypeScript/JavaScript files for injected malicious code before deployment"], "summary": {"action": "Immediate Patch", "impact": "Arbitrary Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects orval-labs\u2019 Orval product, specifically versions older than 7.19.0 and any releases before 8.0.2. 7.19.0 and 8.0.2 contain the fix, so any system using a version older than these fixed releases is susceptible.", "description_and_impact": "A malicious OpenAPI specification that contains an unsanitized x-enumDescriptions field can inject executable TypeScript or JavaScript into the output of Orval\u2019s client generation. The injected code is emitted directly in the generated enum implementation files, allowing an attacker to execute arbitrary instructions when the generated client is used. This flaw is rooted in improper input handling\u2014specifically command injection (CWE\u201177) and code execution via unsanitized dynamic code (CWE\u201194). The primary impact is code execution in any environment that consumes the vulnerable client code.", "risk_and_exploitability": "The CVSS score of 9.3 classifies this flaw as a high\u2011severity vulnerability. EPSS indicates a very low exploitation probability (<1%), and it is currently not listed in CISA\u2019s KEV catalog. However, the attack requires an attacker to supply a crafted OpenAPI spec to the Orval build process, which typically occurs in continuous integration pipelines or build scripts. If such a spec is executed, the attacker could gain arbitrary code execution within the build environment or any host that interprets the generated client."}}}}, "created": "2026-01-20T08:40:04.622306+00:00", "updated": "2026-04-18T16:00:04.278114+00:00", "vendors": ["orval-labs", "orval-labs$PRODUCT$orval"]}