CVE-2026-30306 Details
Description
In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands. The description for the former states that commands determined by the model to be safe will be automatically executed, whereas if the model judges a command to be potentially destructive, it still requires user approval. However, this design is highly susceptible to prompt injection attacks. An attacker can employ a generic template to wrap any malicious command and mislead the model into misclassifying it as a 'safe' command, thereby bypassing the user approval requirement and resulting in arbitrary command execution.
A remote code execution vulnerability exists in SakaDev versions through 4.0.5. The issue arises from the application's command execution design, which allows for prompt injection attacks. Users can choose between executing safe commands automatically or requiring approval for potentially destructive commands. However, an attacker can manipulate this system by wrapping malicious commands in a generic template, tricking the model into classifying them as safe. This exploitation bypasses user approval and enables arbitrary command execution.
Users are advised to update to SakaDev version 4.0.6, available on the VS Code Marketplace. After updating, review the command execution history for any suspicious activity, rotate SSH keys if compromise is suspected, and check for unusual network connections in recent terminal history.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/4 | [email protected] | MitigationThird Party Advisory |
| https://marketplace.visualstudio.com/items?itemName=rahmanazhar.saka-dev | [email protected] | Product |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| rahmanazhar sakadev | < 4.0.6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 8, 2026 | Initial Analysis | [email protected] |
| Apr 1, 2026 | CVE Modified | CISA-ADP |
| Mar 30, 2026 | New CVE Received | [email protected] |