High severity · published May 17, 2026
CVE-2026-8767
vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
7.5
CVSS
7%
EPSS
No
On KEV
Description
A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.0% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
ai · vercel
3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +34 more · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-8767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-8767
Exploit
https://gist.github.com/YLChen-007/870bd6966cd84703d91ce54dfea3bdd0
Third Party Advisory
https://vuldb.com/submit/811402
Third Party Advisory
https://vuldb.com/vuln/364392
Permissions Required
https://vuldb.com/vuln/364392/cti
More from ai
7.3
CVE-2026-8768
vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
6.5
CVE-2026-8769
vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
5.3
CVE-2025-48985
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta