CVE-2026-8767: Vercel AI up to 3.0.97: Remote OS Command Injection Risk

Summary

A vulnerability in Vercel AI's automation feature allows attackers to execute malicious system commands remotely. This could potentially lead to unauthorized access or data modification. Vercel users should update to the latest version to protect against potential attacks.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
vercel	ai	<= 3.0.97 `cpe:2.3:a:vercel:ai::::::::`

Original title

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The man...

Original description

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvd CVSS2.0 4.6

nvd CVSS3.1 5.0

nvd CVSS4.0 1.3

Vulnerability type

CWE-77 Command Injection

CWE-78 OS Command Injection