Wrangler vulnerabilities

2 known vulnerabilities in Wrangler from Cloudflare. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler…

  CVE-2026-0933Jan 20, 2026CloudflareEPSS 1.51%

  SummaryA command injection vulnerability (CWE-78) has been found to exist in the `wrangler pages deploy` command. The issue occurs because the `--commit-hash` parameter is passed directly to a shell command without proper validation or sanitization, allowing a

• 8.0 High severity

  wrangler: Improper Privilege Management

  CVE-2023-7080Dec 29, 2023Cloudflare

  The V8 inspector intentionally allows arbitrary code execution within the Workers sandbox for debugging. wrangler dev would previously start an inspector server listening on all network interfaces. This would allow an attacker on the local network to connect t