CVE-2026-42077

The record

Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a prototype pollution vulnerability in the mailbox store module allows attackers to modify the behavior of all JavaScript objects by injecting malicious properties into Object.prototype. The vulnerability exists in the _applyUpdate() and _updateRecord() functions which use Object.assign() to merge user-controlled data without filtering dangerous keys like __proto__, constructor, or prototype. This issue has been patched in version 1.69.3.

Affected packages

Related vulnerabilities

• GHSA-2cjr-5v3h-v2w4 Evolver has Prototype Pollution via `Object.assign()` in its mailbox store operations Same vulnerability
• GHSA-jxh8-jh77-xh6g @evomap/evolver's validator sandbox allowlist permits `npm`/`npx`, yielding RCE from… Also affects @evomap/evolver
• GHSA-7xp7-m392-h92c @evomap/evolver has an unbounded request body in proxy /asset/submit that causes… Also affects @evomap/evolver
• GHSA-cfcj-hqpf-hccf @evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows… Also affects @evomap/evolver
• CVE-2026-42075 Evolver is a GEP-powered self-evolving engine for AI agents. Also affects @evomap/evolver
• CVE-2026-42076 Evolver is a GEP-powered self-evolving engine for AI agents. Also affects @evomap/evolver
• GHSA-r466-rxw4-3j9j Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write Also affects @evomap/evolver
• GHSA-j5w5-568x-rq53 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code… Also affects @evomap/evolver