CVE-2025-49619

This exploit leverages a Server-Side Template Injection (SSTI) vulnerability in Skyvern's Workflow Editor to achieve remote code execution via Jinja2 template injection, resulting in a reverse shell.

This repository contains a functional exploit for CVE-2025-49619, which leverages Server-Side Template Injection (SSTI) in Skyvern's Workflow Editor to achieve blind remote code execution via a reverse shell. The exploit uses Jinja2 template injection to execute arbitrary commands on the target system.

The repository contains detailed technical reports for multiple CVEs, including CVE-2025-49619 (SSTI in Skyvern Workflow Editor), CVE-2025-62369 (SSTI in Xibo CMS), and CVE-2025-63497 (SQLi in rickxy Hospital Management System). Each report includes root cause analysis, attack scenarios, and technical details but lacks functional exploit code.

This Metasploit module exploits a Server-Side Template Injection (SSTI) vulnerability in Skyvern <= 0.1.84, allowing remote code execution via a malicious workflow upload and execution. The exploit uses Python's SSTI payload to execute arbitrary commands.