Exploitation Summary
CVE-2025-49619 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 4 public exploits from researchers including Cristian Branet, cristibtz, Cristian Branet, msutovsky-r7, including a Metasploit module exploits/linux/http/skyvern_ssti_cve_2025_49619.
AI-analyzed exploit summary This exploit leverages a Server-Side Template Injection (SSTI) vulnerability in Skyvern's Workflow Editor to achieve remote code execution via Jinja2 template injection, resulting in a reverse shell.
Description
Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).
Exploits (4)
This exploit leverages a Server-Side Template Injection (SSTI) vulnerability in Skyvern's Workflow Editor to achieve remote code execution via Jinja2 template injection, resulting in a reverse shell.
This repository contains a functional exploit for CVE-2025-49619, which leverages Server-Side Template Injection (SSTI) in Skyvern's Workflow Editor to achieve blind remote code execution via a reverse shell. The exploit uses Jinja2 template injection to execute arbitrary commands on the target system.
The repository contains detailed technical reports for multiple CVEs, including CVE-2025-49619 (SSTI in Skyvern Workflow Editor), CVE-2025-62369 (SSTI in Xibo CMS), and CVE-2025-63497 (SQLi in rickxy Hospital Management System). Each report includes root cause analysis, attack scenarios, and technical details but lacks functional exploit code.
This Metasploit module exploits a Server-Side Template Injection (SSTI) vulnerability in Skyvern <= 0.1.84, allowing remote code execution via a malicious workflow upload and execution. The exploit uses Python's SSTI payload to execute arbitrary commands.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N