orval MCP client is vulnerable to a code injection attack.
Priority MEDIUM 49CWE-77Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-77.
Summary
orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification. Prior to 7.18.0, the MCP server generation logic relies on string manipulation that incorporates the summary field from the OpenAPI specification without proper validation or escaping. This allows an attacker to "break out" of the string literal and inject arbitrary code. This vulnerability is fixed in 7.18.0.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00778 56th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed orval (orval-labs): 7.18.0@orval/mcp (npm): 7.18.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| orval-labs | orval | before 7.18.0 | 7.18.0 | Patch available | CNA |
| — | @orval/mcp (npm) | before 7.18.0 | 7.18.0 | Patch available | GHSA-mwr6-3gp8-9jmj |
- orval Vendororval-labs Affected before 7.18.0 Fixed in 7.18.0 Patch available CNA
- @orval/mcp (npm) Vendor— Affected before 7.18.0 Fixed in 7.18.0 Patch available GHSA-mwr6-3gp8-9jmj
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:* | before 7.18.0 | Vulnerable | orval-labs |
- cpe:2.3:a:orval:orval:*:*:*:*:*:*:*:* Versions before 7.18.0 Vulnerable ·orval-labs
Remediation
- Fix · CNA orval (orval-labs) Fixed in 7.18.0
- Fix · GHSA-mwr6-3gp8-9jmj @orval/mcp (npm) Fixed in 7.18.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-22785
- 2026-10-03 Alias added: GHSA-mwr6-3gp8-9jmj
References
More orval-labs Orval vulnerabilities
- TI-2026-19289 Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation CVSS 4.0CRITICAL 9.3
- TI-2026-20303 Orval has a code injection via unsanitized x-enum-descriptions uing JS comments CVSS 4.0CRITICAL 9.3
- TI-2026-19450 Orval Mock Generation Code Injection via const CVSS 4.0HIGH 7.7
Sources
- CVE-2026-22785 · CVE Program
- CVE-2026-22785 · NVD
- FIRST EPSS
- GHSA-mwr6-3gp8-9jmj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences