AIKIDO-2026-36897
adversarial-review is vulnerable to Command Injection
78
High Risk
This Affects:
adversarial-reviewTL;DR
adversarial-review runs git and provider CLIs by bare command name and, on Windows, spawns them through cmd.exe, which re-resolves the command and re-parses argv against the current directory. When the tool reviews a repository, that repository can plant an executable, a .cmd shim, or a node_modules/.bin entry that is selected ahead of the intended binary, running repository-supplied code on the reviewer's host, and cmd.exe re-interprets metacharacters passed in argv. This happens on the default review path with no autofixer involved. The fix resolves git and helper commands to trusted absolute paths outside the repository, routes Windows spawns through a validated interpreter with a sanitized child environment, and rejects control characters.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run a review against a repository whose contents are not fully trusted.
Background info
adversarial-review is vulnerable to Command Injection in versions 1.1.0 - 2.9.1.
How to fix this
Upgrade the adversarial-review library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.