high8.5Public exploit code
CVE-2025-49619
Skyvern has a Jinja runtime leak
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Skyvern 0.1.85 - Remote Code Execution (RCE) via SSTI2025-06-15 · webapps · multiple
Impact
Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | skyvern | <= 0.2.0 | none recorded |
Affected products
| Product | Affected versions |
|---|---|
| Skyvern | through 0.1.85 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://cristibtz.github.io/posts/CVE-2025-49619/
- https://github.com/Skyvern-AI/skyvern/commit/db856cd8433a204c8b45979c70a4da1e119d949d
- https://www.exploit-db.com/exploits/52335
- https://cristibtz.blog/posts/CVE-2025-49619/
- https://github.com/advisories/GHSA-h92g-3xc3-ww2r
- https://nvd.nist.gov/vuln/detail/CVE-2025-49619
- https://cristibtz.github.io/posts/CVE-2025-49619
- https://cristibtz.blog/posts/CVE-2025-49619