Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-57586— CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution

Quick assessment

Affected
naranor agent-coderag
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CodeRAG 是一款面向 AI 编程智能体的轻量级语义代码搜索与蒸馏工具。在 1.3.1 之前， 中默认的 agent-coderag 同步流程会为已索引的路径调用 ，而 将存在 或 视为足以触发 。 会优先选择由仓库控制的 或 文件，并以仓库根目录作为工作目录，直接将其传递给 执行；而 中的 仅约束目录位置，但不校验可执行文件的内容或完整性。因此，当受害者索引了一个由攻击者控制的 Gradle 仓库时，就会以受害者操作系统的权限执行攻击者提供的代码，从而可能导致用户环境中的信息泄露、数据修改、持久化驻留或服务拒

CVSS 8.6 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-57586

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
CodeRAG: Gradle Wrapper Execution During Dependency Discovery Enables Arbitrary Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
CodeRAG is a lightweight semantic code search and distillation utility for AI coding agents. Prior to 1.3.1, the default agent-coderag sync flow in code_rag/entry/cli.py calls sync_dependencies for an indexed path, and code_rag/core/manager.py treats build.gradle or build.gradle.kts as sufficient to invoke _sync_gradle. _sync_gradle prefers a repository-controlled gradlew or gradlew.bat file and passes it directly to asyncio.create_subprocess_exec with the repository root as the working directory; validate_path in code_rag/core/utils.py constrains the directory location but does not validate the executable's content or integrity. A victim who indexes an attacker-controlled Gradle repository therefore executes attacker-supplied code with the victim's operating-system privileges, allowing disclosure, modification, persistence, or denial of service in the user environment. This issue is fixed in 1.3.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
naranor agent-coderag < 1.3.1 -

II. Public POCs for CVE-2026-57586

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-57586

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-57586 (1)

Vendor Advisories for CVE-2026-57586 (1)

Vendor Pages for CVE-2026-57586 (1)

IV. Related Vulnerabilities

Same weakness: CWE-78

V. Comments for CVE-2026-57586

No comments yet

Leave a comment