evolver vulnerabilities

2 known vulnerabilities in evolver from EvoMap. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  evolver: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-42076May 4, 2026EvoMapEPSS 1.7%

  Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a command injection vulnerability in the _extractLLM() function allows attackers to execute arbitrary shell commands on the server. The function constructs a curl command usi

• 8.1 High severity

  evolver: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-42075May 4, 2026EvoMap

  Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a path traversal vulnerability in the skill download (fetch) command allows attackers to write files to arbitrary locations on the filesystem. The --out= flag accepts user-pr