CVE-2026-18770

VibeSurf's Python Validation Handler is vulnerable to remote code injection.

• CVSS 5.5
• 74
• Input Validation and Sanitization
• Remote

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

CVE

CVE-2026-18770

CWE

74

CVSS base score

5.5

Published

2026-08-04

OWASP

A03 Injection

Orthogonal defect classification

Checking

Code defect classification

Incorrect Check

Category

Input Validation and Sanitization

Subcategory

Command Injection

Accessibility scope

Remote

Impact

Arbitrary Code Execution

Affected component

vibesurf-ai

Solution

There is currently no patch or fixed version available as the vendor has not responded to the disclosure.

# Fictional component: vibesurf-ai Python Validation Handler
# File: /code/validator.py

def evaluate_python_expression(expression: str):
    """
    Evaluates a user-provided Python expression as part of a validation routine.
    Intended for simple data literals.
    """
    # VULNERABLE: Direct evaluation of user input leads to code injection.
    result = eval(expression)
    
    # ... further processing on the result ...
    return result

# Fictional component: vibesurf-ai Python Validation Handler
# File: /code/validator.py

import ast

def evaluate_python_expression(expression: str):
    """
    Evaluates a user-provided Python expression as part of a validation routine.
    Intended for simple data literals.
    """
    # FIX: Use ast.literal_eval to safely parse and evaluate only Python literals.
    result = ast.literal_eval(expression)
    
    # ... further processing on the result ...
    return result

__import__('os').system('id')

@misc{vaitp:cve202618770,
  title        = {{VibeSurf's Python Validation Handler is vulnerable to remote code injection.}},
  author       = {Bogaerts, Fr\'ed\'eric and Ivaki, Naghmeh and Fonseca, Jos\'e},
  year         = {2026},
  note         = {VAITP Python Vulnerability Dataset, entry CVE-2026-18770},
  howpublished = {\url{https://netpack.pt/vaitp/vulnerability/CVE-2026-18770/}}
}