What’s Vulnerable › Products

EvoMap evolver vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your EvoMap evolver version is affected

Latest EvoMap evolver vulnerabilities

• CVE-2026-42077 — Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations (CVSS 5.2)
• CVE-2026-42076 — Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution (CVSS 9.8)
• CVE-2026-42075 — Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write (CVSS 8.1)