Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-62847— Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)

Quick assessment

Affected
metalama Metalama
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Metalama 是一个基于 Roslyn 的 C开源模式与架构工具包。在 2025.1.18、2026.0.25 和 2026.1.19 版本之前，Metalama.Framework 和 Metalama.Tool 会从可预测的临时目录中加载并执行编译时程序集、辅助可执行工具以及嵌入的辅助程序集。在 Linux 和 macOS 系统上，默认的 路径对全局用户可写，且现有工件仅依据哨兵文件（sentinel）或 标记文件进行信任，而未经过完整性验证。 在共享机器或 CI/构建代理上，本地非特权用户可以预先创建确定

CVSS 8.2 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-62847

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)
Source: CVE Program / CVE List V5
Vulnerability Description
Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execute compile-time assemblies, auxiliary executable tools and embedded helper assemblies from predictable temporary directories. On `Linux` and `macOS`, the default `Path.GetTempPath()` location is world-writable, and existing artifacts are trusted based on sentinel or `.completed` marker files rather than integrity verification. A local unprivileged user on a shared machine or CI/build agent can pre-create the deterministic directory structure and plant a malicious DLL with the matching sentinel. When a higher-privileged developer or build account subsequently builds, Metalama skips regeneration and executes the planted artifact in the compiler, IDE or MSBuild process as the building user. This permits cross-user privilege escalation, reading source and secrets, supply-chain tampering with build output, or disrupting builds. Default Windows per-user temporary directories are protected by ACLs and are not affected. Deployer-selected insecure cache locations are outside the vulnerability's scope. This issue is fixed in versions 2025.1.18, 2026.0.25 and 2026.1.19.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的临时文件
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
metalama Metalama < 2025.1.18 -

II. Public POCs for CVE-2026-62847

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-62847

请登录查看更多情报信息。

Other References for CVE-2026-62847 (7)

IV. Related Vulnerabilities

Same product: Metalama
Same vendor: metalama
Same weakness: CWE-377