CVE-2026-75486

Name of the Vulnerable Software and Affected Versions Synk Sweater Comb versions prior to 3.8.8

Description An issue exists where an attacker who controls the .vervet.yaml configuration file can execute arbitrary OS commands. This occurs when malicious input is injected into the linters.<key>.optic-ci.original branch name field. The expectGitBranch() function in src/lint.ts passes the unsanitized branch name directly into child process.exec() using an unescaped template literal, allowing command execution when the lint command is run against the repository.

Recommendations Update to version 3.8.8 or later.