{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27635", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-20T22:02:30.028Z", "datePublished": "2026-02-25T23:10:27.951Z", "dateUpdated": "2026-02-26T16:52:18.942Z"}, "containers": {"cna": {"title": "Manyfold vulnerable to OS command injection via ZIP filename in f3d render", "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "lang": "en", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2"}, {"name": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0"}], "affected": [{"vendor": "manyfold3d", "product": "manyfold", "versions": [{"version": "< 0.133.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-25T23:10:27.951Z"}, "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render generation is enabled, a logged-in user can achieve RCE by uploading a ZIP containing a file with a shell metacharacter in its name. The filename reaches a Ruby backtick call unsanitized. Version 0.133.0 fixes the issue."}], "source": {"advisory": "GHSA-p589-cf26-v7h2", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-26T16:52:07.119879Z", "id": "CVE-2026-27635", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T16:52:18.942Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "Manyfold vulnerable to OS command injection via ZIP filename in f3d render", "source": {"advisory": "GHSA-p589-cf26-v7h2", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "manyfold3d", "product": "manyfold", "versions": [{"status": "affected", "version": "< 0.133.0"}]}], "references": [{"url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2", "name": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0", "name": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render generation is enabled, a logged-in user can achieve RCE by uploading a ZIP containing a file with a shell metacharacter in its name. The filename reaches a Ruby backtick call unsanitized. Version 0.133.0 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-25T23:10:27.951Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27635", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-26T16:52:07.119879Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-02-26T16:52:13.769Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-27635", "state": "PUBLISHED", "dateUpdated": "2026-02-25T23:10:27.951Z", "dateReserved": "2026-02-20T22:02:30.028Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-25T23:10:27.951Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F54584E-5C84-449F-848F-730DC1BECAC2", "versionEndExcluding": "0.133.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Prior to version 0.133.0, when model render generation is enabled, a logged-in user can achieve RCE by uploading a ZIP containing a file with a shell metacharacter in its name. The filename reaches a Ruby backtick call unsanitized. Version 0.133.0 fixes the issue."}, {"lang": "es", "value": "Manyfold es una aplicaci\u00f3n web de c\u00f3digo abierto y autoalojada para gestionar una colecci\u00f3n de modelos 3D, particularmente enfocada en la impresi\u00f3n 3D. Antes de la versi\u00f3n 0.133.0, cuando la generaci\u00f3n de renderizados de modelos est\u00e1 habilitada, un usuario autenticado puede lograr RCE al subir un archivo ZIP que contiene un archivo con un metacaracter de shell en su nombre. El nombre del archivo llega a una llamada de backtick de Ruby sin sanear. La versi\u00f3n 0.133.0 corrige el problema."}], "id": "CVE-2026-27635", "lastModified": "2026-02-27T18:36:30.553", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-02-26T00:16:24.307", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-p589-cf26-v7h2"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.133.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "manyfold", "source": "cna", "vendor": "manyfold3d"}, "product": "manyfold", "vendor": "manyfold3d"}], "analysis": {"en": {"generated_at": "2026-04-17T14:43:57.762816+00:00", "value": {"mitigation_remediation": ["Upgrade Manyfold to version 0.133.0 or later to apply the vendor\u2019s fix.", "Disable the model render generation feature until a patch is installed, removing the vulnerable execution path.", "Validate and sanitize all uploaded ZIP filenames, rejecting names that contain shell metacharacters before processing."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "All installations of Manyfold before version 0.133.0 are impacted. The application is a self\u2011hosted web service provided by manyfold3d, and any system that allows authenticated users to upload model render ZIP archives is vulnerable. Version 0.133.0 and later contain the fix.", "description_and_impact": "Manyfold\u2019s vulnerability is an operating system command injection that occurs when a ZIP file containing a file with a shell metacharacter in its name is uploaded. The filename is fed directly into a Ruby backtick call without sanitization, allowing an attacker to execute arbitrary shell commands in the rendering backend. This flaw is classified as CWE\u201178 and gives the attacker remote code execution privileges once the model render generation feature is enabled.", "risk_and_exploitability": "The CVSS base score of 7.5 reflects a serious risk, but the EPSS score is below 1%, indicating that the exploitation probability remains low at present. The issue is not listed in the CISA Known Exploited Vulnerabilities catalog. Attack requires authentication and the use of the render feature; an attacker can craft a ZIP containing a malicious filename such as ;id; to trigger command execution during rendering."}}}}, "created": "2026-02-26T13:10:39.619653+00:00", "updated": "2026-04-17T14:45:21.042389+00:00", "vendors": ["manyfold3d", "manyfold3d$PRODUCT$manyfold"]}