Executive brief
Ridvay Code's command auto-approval module, which is used to automatically validate and run system commands, contains a critical security flaw. The module's security filters can be bypassed by hiding malicious code inside otherwise safe-looking commands. If exploited, an attacker could take complete control of the underlying system without any user interaction, potentially leading to data theft or total service disruption.
Technical details
An OS command injection vulnerability exists in Ridvay Code's command auto-approval module (versions 0.1.1 and earlier) due to improper neutralization of special elements. The system utilizes fragile regular expressions for command validation that fail to account for shell command substitution syntax, such as $(...) and backticks. By embedding malicious payloads within the arguments of whitelisted commands (e.g., git log), an attacker can bypass the validation logic. The underlying shell executes the substituted malicious command, resulting in full Remote Code Execution (RCE) without requiring authentication or user interaction.
Affected products
- Ridvay Code auto-approval_module <= 0.1.1
Timeline
- 2026-03-27: disclosed: Vulnerability reported on GitHub issue tracker
- 2026-03-31: advisory: CVE-2026-30314 published