CyberSecBulletin

EvoMap vulnerabilities

We track 2 vulnerabilities in EvoMap products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 4, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest EvoMap vulnerabilities

  • 9.8 Critical severity

    evolver: Improper Neutralization of Special Elements used in an OS Command

    CVE-2026-42076EvoMapEPSS 1.7%

    Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command usi

  • 8.1 High severity

    evolver: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-42075EvoMap

    Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-pr