CVE-2026-30309

InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective. The predefined blocklist fails to cover native high-risk commands in Windows PowerShell (such as powershell), and the matching algorithm lacks dynamic semantic parsing unable to recognize string concatenation, variable assignment, or double-quote interpolation in Shell syntax. Malicious commands can bypass interception through simple syntax obfuscation. An attacker can construct a file containing malicious instructions for remote code injection. When a user imports and views such a file in the IDE, the Agent executes dangerous PowerShell commands outside the blacklist without user confirmation, resulting in arbitrary command execution or sensitive data leakage.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/11	Issue Tracking Third Party Advisory
https://www.tokfinity.com/infcode	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:tokfinity:infcode:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-03-31 15:16

Updated : 2026-07-25 11:10

NVD link : CVE-2026-30309

Mitre link : CVE-2026-30309

CVE.ORG link : CVE-2026-30309

JSON object : View

Products Affected

tokfinity

infcode

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-30309", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-30309", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-31T15:13:25.258792Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-03-31T15:16:12.863", "references": [{"url": "https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/11", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.tokfinity.com/infcode", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective. The predefined blocklist fails to cover native high-risk commands in Windows PowerShell (such as powershell), and the matching algorithm lacks dynamic semantic parsing unable to recognize string concatenation, variable assignment, or double-quote interpolation in Shell syntax. Malicious commands can bypass interception through simple syntax obfuscation. An attacker can construct a file containing malicious instructions for remote code injection. When a user imports and views such a file in the IDE, the Agent executes dangerous PowerShell commands outside the blacklist without user confirmation, resulting in arbitrary command execution or sensitive data leakage."}, {"lang": "es", "value": "El m\u00f3dulo de auto-ejecuci\u00f3n de terminal de InfCode contiene una cr\u00edtica vulnerabilidad de filtrado de comandos que hace que su mecanismo de seguridad de lista negra sea completamente ineficaz. La lista de bloqueo predefinida no cubre comandos nativos de alto riesgo en Windows PowerShell (como powershell), y el algoritmo de coincidencia carece de an\u00e1lisis sem\u00e1ntico din\u00e1mico incapaz de reconocer la concatenaci\u00f3n de cadenas, la asignaci\u00f3n de variables o la interpolaci\u00f3n de comillas dobles en la sintaxis de Shell. Los comandos maliciosos pueden eludir la intercepci\u00f3n mediante una simple ofuscaci\u00f3n de sintaxis. Un atacante puede construir un archivo que contenga instrucciones maliciosas para la inyecci\u00f3n remota de c\u00f3digo. Cuando un usuario importa y visualiza dicho archivo en el IDE, el Agente ejecuta comandos peligrosos de PowerShell fuera de la lista negra sin confirmaci\u00f3n del usuario, lo que resulta en la ejecuci\u00f3n arbitraria de comandos o la fuga de datos sensibles."}], "lastModified": "2026-07-25T11:10:00.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tokfinity:infcode:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3D12CD1-2D4A-40B2-B18B-A5CCB61891E4", "versionEndIncluding": "1.3.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}