{"uuid": "d23bea55-b214-49ca-96d4-c78cc7f309bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77413", "type": "seen", "source": "https://gist.github.com/alon710/1b32b1920b2d1520540a780d7d0490bd", "content": "# CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77413\n\n## Summary\nA critical prototype pollution and sandbox escape vulnerability was discovered in the JSONata query and transformation library before versions 1.8.8 and 2.2.0. By providing a malicious JSONata expression that bypasses ownership checks on object properties, remote attackers can execute arbitrary code in the context of the host Node.js application.\n\n## TL;DR\nUnauthenticated remote code execution vulnerability in JSONata via prototype lookup chain traversal.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.3 (Critical)\n- **EPSS Score**: N/A\n- **Impact**: Unauthenticated Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- jsonata npm package\n- Node.js applications evaluating untrusted JSONata queries\n\n## Mitigation\n\n- Upgrade JSONata to latest version (1.8.8+ or 2.2.0+)\n- Enable execution timeouts and stack limits\n- Sanitize and validate untrusted JSONata expressions before execution\n\n**Remediation Steps:**\n1. Identify all projects running vulnerable versions of jsonata.\n2. Execute 'npm install jsonata@latest' to update to a secure version.\n3. Integrate execution guardrails like execution timeout and stack depth limit options in the JSONata configuration when evaluating user input.\n\n## References\n\n- [GHSA-8gq3-vp5j-2grp](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-8gq3-vp5j-2grp)\n- [NVD Detail - CVE-2026-77413](https://nvd.nist.gov/vuln/detail/CVE-2026-77413)\n- [CVE.org - CVE-2026-77413](https://www.cve.org/CVERecord?id=CVE-2026-77413)\n- [JSONata v1.8.8 Release Notes](https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8)\n- [JSONata v2.2.0 Release Notes](https://github.com/jsonata-js/jsonata/releases/tag/v2.2.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77413) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T01:32:06.828249Z"}