LLMHigh
CVE-2025-49619: Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of…
- Occurred
- Jun 7, 2025
- Published
- Jun 7, 2025
- Source
- NVD CVE
Summary
Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).
Tags
- CVE
- CVE-2025-49619
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Vulnerability in AI workflow tool allows remote code execution via template injection in LLM prompt fields.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8