Vulnerability Description
Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicious input into the linters.<key>.optic-ci.original branch name field. The expectGitBranch() function in src/lint.ts passes the unsanitized branch name directly into child_process.exec() via an unescaped template literal, enabling arbitrary command execution when the lint command is run against the repository.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/snyk/sweater-comb/commit/05a0eec4f2acb9ce6d4814016b475504fc64
- https://github.com/snyk/sweater-comb/pull/743
- https://github.com/snyk/sweater-comb/releases/tag/v3.8.8
- https://www.vulncheck.com/advisories/synk-sweater-comb-command-injection-via-ver
- https://github.com/snyk/sweater-comb/pull/743
FAQ
What is CVE-2026-75486?
CVE-2026-75486 is a vulnerability with a CVSS score of 8.0 (HIGH). Synk Sweater Comb before 3.8.8 contains a command injection vulnerability that allows an attacker who controls the .vervet.yaml configuration file to execute arbitrary OS commands by injecting malicio...
How severe is CVE-2026-75486?
CVE-2026-75486 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75486?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.