{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tokfinity:infcode:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3D12CD1-2D4A-40B2-B18B-A5CCB61891E4",
              "versionEndIncluding": "1.3.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "InfCode\u0027s terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective. The predefined blocklist fails to cover native high-risk commands in Windows PowerShell (such as powershell), and the matching algorithm lacks dynamic semantic parsing unable to recognize string concatenation, variable assignment, or double-quote interpolation in Shell syntax. Malicious commands can bypass interception through simple syntax obfuscation. An attacker can construct a file containing malicious instructions for remote code injection. When a user imports and views such a file in the IDE, the Agent executes dangerous PowerShell commands outside the blacklist without user confirmation, resulting in arbitrary command execution or sensitive data leakage."
    },
    {
      "lang": "es",
      "value": "El m\u00f3dulo de auto-ejecuci\u00f3n de terminal de InfCode contiene una cr\u00edtica vulnerabilidad de filtrado de comandos que hace que su mecanismo de seguridad de lista negra sea completamente ineficaz. La lista de bloqueo predefinida no cubre comandos nativos de alto riesgo en Windows PowerShell (como powershell), y el algoritmo de coincidencia carece de an\u00e1lisis sem\u00e1ntico din\u00e1mico incapaz de reconocer la concatenaci\u00f3n de cadenas, la asignaci\u00f3n de variables o la interpolaci\u00f3n de comillas dobles en la sintaxis de Shell. Los comandos maliciosos pueden eludir la intercepci\u00f3n mediante una simple ofuscaci\u00f3n de sintaxis. Un atacante puede construir un archivo que contenga instrucciones maliciosas para la inyecci\u00f3n remota de c\u00f3digo. Cuando un usuario importa y visualiza dicho archivo en el IDE, el Agente ejecuta comandos peligrosos de PowerShell fuera de la lista negra sin confirmaci\u00f3n del usuario, lo que resulta en la ejecuci\u00f3n arbitraria de comandos o la fuga de datos sensibles."
    }
  ],
  "id": "CVE-2026-30309",
  "lastModified": "2026-07-25T11:10:00.100",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-30309",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-03-31T15:13:25.258792Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-03-31T15:16:12.863",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://github.com/Secsys-FDU/LLM-Tool-Calling-CVEs/issues/11"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Product"
      ],
      "url": "https://www.tokfinity.com/infcode"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}