Renovate 32.135.0 through 40.32.99 suffer from a command injection flaw that allows an attacker with repository write permissions to inject arbitrary dependency names directly into system commands. The attacker can trigger the install or uninstall process with malicious payloads, resulting in execution of arbitrary shell commands on the host where Renovate runs. This elevates to full remote code execution, exposing the underlying operating system to compromise.

Affected are versions of the renovatebot:renovate product ranging from 32.135.0 up to but excluding 40.33.0. These versions are used by organizations that run automated dependency updates, and anyone maintaining such a repository and granting write access to contributors can be targeted. The vulnerability is specific to the hermit manager component responsible for handling custom dependency scripts.

The flaw carries a CVSS score of 8.4, classifying it as high severity, and although EPSS is not disclosed, the lack of a KEV listing suggests no public exploit known yet. Attackers must have write access to the target repository to craft a malicious hermit dependency name, but this permission range is common for developers and contributors, making the exploit practical in many environments. The attack vector is remote, triggered through normal code contribution workflows, and once executed, the attacker gains full control over the Renovate host.