Description

A vulnerability was found in TanStack devtools-vite 0.7.0. Affected by this issue is the function installPackage of the file packages/devtools-bundler-core/src/package-manager.ts of the component Development Devtools Event Bus. The manipulation of the argument packageName results in os command injection. Attacking locally is a requirement. A high complexity level is associated with this attack. The exploitation is known to be difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "4.5",
  "pubDate": "2026-08-24T03:16:40.473Z",
  "pubdate": "2026-08-24T03:16:40.473Z",
  "executiveSummary": "An OS command injection vulnerability has been identified in TanStack devtools-vite version 0.7.0, specifically within the Development Devtools Event Bus component. The vulnerability resides in the installPackage function located in packages/devtools-bundler-core/src/package-manager.ts. Successful exploitation of this flaw allows a malicious actor to achieve operating system command execution on the host system.\nThe risk implication is severe, potentially leading to full system compromise depending on the privileges of the running process. However, several constraints limit the immediate threat vector: the attack vector requires local access, carries a high complexity level, and the exploitation process is documented as difficult.\nThe vulnerability is publicly known with available exploit material, and the vendor has not yet responded to early issue reports. Security teams should treat this as a high-priority risk for environments where local users or untrusted local processes interact with the affected development tools.",
  "technicalDetails": "The root cause of the vulnerability stems from improper input validation and unsafe handling of the packageName argument within the installPackage function in packages/devtools-bundler-core/src/package-manager.ts. When the application processes package installation requests via the Development Devtools Event Bus, the untrusted packageName input is improperly sanitized or directly concatenated into system shell command strings.\nExploitation of this vulnerability requires local access to the target host and involves a high level of complexity, making automated or remote exploitation infeasible without prior local access or a chained local vector. An attacker must successfully manipulate the packageName argument to inject arbitrary shell metacharacters or commands into the underlying execution context.\nThe attack flow proceeds as follows: First, the attacker identifies or interacts with the Development Devtools Event Bus exposed by the vulnerable TanStack devtools-vite application. Second, the attacker crafts a malicious input string containing malicious OS commands payload embedded within the packageName parameter. Third, the application passes this unsanitized input to the vulnerable installPackage function. Fourth, the function constructs a shell execution command using the tainted argument without adequate parameterization or escaping. Finally, the underlying operating system shell executes the injected command with the privileges of the local process running the development tools, resulting in unauthorized command execution.\nThe vulnerable component is the Development Devtools Event Bus, specifically the package manager utility handling dynamic package installations. The affected software version is TanStack devtools-vite 0.7.0. Authentication and privilege requirements depend on the local execution context of the development server, but typically execute under the user account launching the development environment. The vulnerability exhibits no network exposure by default due to the local access requirement. Post-exploitation impact includes arbitrary command execution, potential lateral movement, data exfiltration, or local system tampering."
}