CVE-2026-51190 Details

A command injection vulnerability has been identified in the Serverless-Devs CLI tool, specifically in the '@serverless-devs/s' package, versions through 3.1.11. The issue arises in the 's init' command, which passes unsanitized user input to 'child_process.spawn()' with 'shell: true'. This allows for OS command injection, particularly with URLs ending in '.git', by exploiting the input validation bypass. The vulnerability is significant in Kubernetes CI/CD environments where the CLI runs in a pod with a mounted service account token, potentially leading to token theft and unauthorized access to the Kubernetes API, depending on the token's RBAC permissions.

Remove 'shell: true' from the 'spawn' call in the 'src/command/init/manager.ts' file. Without this option, Node.js will pass user input directly to the 'git' command without interpreting it as shell syntax, eliminating the command injection risk.