CVE-2022-40764

Snyk CLI before 1.996.0 allows arbitrary command execution, affecting Snyk IDE plugins and the snyk npm package. Exploitation could follow from the common practice of viewing untrusted files in the Visual Studio Code editor, for example. The original demonstration was with shell metacharacters in the vendor.json ignore field, affecting snyk-go-plugin before 1.19.1. This affects, for example, the Snyk TeamCity plugin (which does not update automatically) before 20220930.142957.

• CWE-78

• https://github.com/snyk/cli/releases/tag/v1.996.0Patch, Release Notes, Third Party Advisory
• https://github.com/snyk/snyk-go-plugin/releases/tag/v1.19.1Patch, Release Notes, Third Party Advisory
• https://support.snyk.io/hc/en-us/articles/7015908293789-CVE-2022-40764-Command-Injection-vulnerability-affecting-Snyk-CLI-versions-prior-to-1-996-0Patch, Vendor Advisory
• https://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution/Exploit, Technical Description, Third Party Advisory
• https://github.com/snyk/cli/releases/tag/v1.996.0Patch, Release Notes, Third Party Advisory
• https://github.com/snyk/snyk-go-plugin/releases/tag/v1.19.1Patch, Release Notes, Third Party Advisory
• https://support.snyk.io/hc/en-us/articles/7015908293789-CVE-2022-40764-Command-Injection-vulnerability-affecting-Snyk-CLI-versions-prior-to-1-996-0Patch, Vendor Advisory
• https://www.imperva.com/blog/how-scanning-your-projects-for-security-issues-can-lead-to-remote-code-execution/Exploit, Technical Description, Third Party Advisory

Published

Oct 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-40758A Buffer Access with Incorrect Length Value vulnerablity in …7.5
• CVE-2022-40759A NULL pointer dereference issue in the TEE_MACCompareFinal …7.5
• CVE-2022-4076Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-40760A Buffer Access with Incorrect Length Value vulnerablity in …7.5
• CVE-2022-40761The function tee_obj_free in Samsung mTower through 0.3.0 al…7.5
• CVE-2022-40762A Memory Allocation with Excessive Size Value vulnerablity i…7.5
• CVE-2022-40765A vulnerability in the Edge Gateway component of Mitel MiVoi…6.8
• CVE-2022-40766Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows lo…9.8
• CVE-2022-40768drivers/scsi/stex.c in the Linux kernel through 5.19.9 allow…5.5
• CVE-2022-40769profanity through 1.60 has only four billion possible RNG in…7.5
• CVE-2022-4077Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-40770Zoho ManageEngine ServiceDesk Plus versions 13010 and prior …7.2