Manyfold CVE-2026-27635 OS Command Injection via ZIP Filename RCE

Critical Vulnerability Information Vulnerability Overview Name: OS command injection via ZIP filename in f3d render CVE ID: CVE-2026-27635 GHSA ID: GHSA-p589-cf26-v7h2 Severity: High (7.5/10) Affected and Fixed Versions Affected Versions: - : edge >= git sha 1697857 - : edge >= git sha 1697857 Fixed Versions: - v0.133.0 Vulnerability Description Summary: When model render generation is enabled, authenticated users can achieve Remote Code Execution (RCE) by uploading a ZIP file containing filenames with shell metacharacters. The filename is passed directly to a Ruby backtick call without any sanitization. Details: - Direct file uploads are initially processed by , which sanitizes dangerous characters in filenames. - However, ZIP file extraction is handled in , where is used directly. This causes the filename to enter the background-executed command without processing. - The Ruby backtick invokes and executes command substitution within the filename. The binary, bundled within , can be exploited. PoC: Create a ZIP file containing a malicious member filename: Upload to the model upload endpoint as any registered user: The background processing task will execute the command, resulting in containing the server's output. Impact: In instances where the setting is enabled, any authenticated user can execute remote code with the privileges of the Rails process user. If administrators enable rendering features (e.g., public gallery), the server becomes vulnerable to all users. Weakness CWE: CWE-78 (OS Command Injection) Severity Score (CVSS 3.1 Base Metrics) Attack Vector: Network Attack Complexity: High Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

Goal Reached Thanks to every supporter — we hit 100%!

Manyfold CVE-2026-27635 OS Command Injection via ZIP Filename RCE

More from this source