CVE-2026-44451 Details
Description
Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowing dangerous globals (fetch, window, eval, etc.) with undefined. A static source validator (validateComponentOverrideSource) additionally blocks these identifiers by word-boundary regex. Both controls are bypassed. String-split bypass of the static validator: any blocked identifier can be reconstructed at runtime from string fragments ('ownerDoc' + 'ument'). DOM ref escape from the sandbox: useRef and useEffect are provided in scope. A ref attached to a rendered element gives a live DOM node. From any real DOM node, node['ownerDoc'+'ument']['def'+'aultView'] yields the real window, bypassing all identifier shadows. Theme packs (.lumitheme / .lumiverse-theme) are the shareable delivery mechanism. A malicious pack is an exploit path: the victim imports the file, enables one component override in the Theme Editor, and the payload fires in their authenticated session.This vulnerability is fixed in 0.9.7.
A vulnerability in Lumiverse versions prior to 0.9.7 allows for unauthorized access to the component override system. The issue arises because user-supplied TSX is transpiled and executed in a way that obscures critical global functions, such as fetch and window, but can be manipulated to restore access. This is achieved by bypassing a static source validation that blocks certain identifiers, enabling the reconstruction of blocked names at runtime. Additionally, the vulnerability exploits the useRef and useEffect hooks to access live DOM nodes, from which the real window object can be retrieved, circumventing the identifier shadows. The vulnerability is packaged and delivered through malicious theme packs, which, when imported and activated by a user, execute the payload within the user's authenticated session.
Users should update to Lumiverse version 0.9.7 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 26, 2026CISA-ADP
Assessed May 27, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/prolix-oc/Lumiverse/security/advisories/GHSA-rgp6-55rw-5xf4 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/prolix-oc/Lumiverse/security/advisories/GHSA-rgp6-55rw-5xf4 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-693 | Protection Mechanism Failure | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Lumiverse | <= 0.9.5 (semver) |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 27, 2026 | CVE Modified | CISA-ADP |
| May 26, 2026 | New CVE Received | [email protected] |