CVE-2026-63325

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor, prototype, or __proto__ properties in packages/respect-core/src/modules/context-parser/get-value-from-context.ts, reach the JavaScript Function constructor, and execute arbitrary code when a user processes an untrusted description. The executed code runs with the privileges of the CLI process and can execute shell commands or read CI secrets. Users processing only trusted, self-authored workflows are not affected. This issue is fixed in @redocly/respect-core and @redocly/cli version 2.33.0.

• CWE-94
• CWE-95

• https://github.com/Redocly/redocly-cli/commit/d26d452368066be1400f43cea915dd9ea508e18b
• https://github.com/Redocly/redocly-cli/pull/2881
• https://github.com/Redocly/redocly-cli/pull/2922
• https://github.com/Redocly/redocly-cli/releases/tag/@redocly/respect-core@1.34.17
• https://github.com/Redocly/redocly-cli/releases/tag/@redocly/respect-core@2.33.0
• https://github.com/Redocly/redocly-cli/security/advisories/GHSA-xw2f-5386-m542

Published

Sep 16, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63310Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-63311NLTK before 3.10.0 (affected versions <= 3.9.4) contains a s…5.3
• CVE-2026-63312NLTK before 3.10.0 contains an arbitrary local file read vul…7.5
• CVE-2026-633139Router before 0.4.72 contains a server-side request forgery…8.3
• CVE-2026-63317Arbitrary Class Instantiation via XML Feature Generator Desc…5.6
• CVE-2026-6332CWE-312: Cleartext Storage of Sensitive Information vulnerab…7.5
• CVE-2026-63328Trivy is a security scanner. Prior to 0.72.0, plugin manifes…6.8
• CVE-2026-63329Warpgate is an open source SSH, HTTPS and MySQL bastion host…4.9
• CVE-2026-6333Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fa…5
• CVE-2026-63330Warpgate is an open source SSH, HTTPS and MySQL bastion host…7.7
• CVE-2026-63334draw.io is a configurable diagramming and whiteboarding appl…6.8
• CVE-2026-63335The RabbitMQ Java client library allows Java and JVM-based a…6.3