Renovate versions 39.53.0 through 40.32.x contain a command‑injection flaw in the gleam manager. The depName parameter is appended to gleam dependency update commands without sanitization, allowing malicious input to execute arbitrary commands on the machine that runs Renovate. An attacker leveraging this flaw could compromise confidentiality, integrity, and availability of the host system by executing shell commands as the Renovate user.

The vendor and product affected is Renovatebot Renovate. All releases from 39.53.0 up to but excluding 40.33.0 are vulnerable. Users of these versions should verify the exact build number they are running.

The CVSS score of 8.4 indicates a high severity. The EPSS score is < 1%, which suggests a low probability of exploitation in the near term. The lack of a listed KEV entry and the need for repository write access suggest the vulnerability is not widely exploited at this time. The primary attack path requires an attacker to add a malicious gleam.toml file to a repository that Renovate scans, thereby triggering the injection when the host processes the file. Exploitation typically arises in continuous integration or automated dependency update environments where Renovate runs with elevated privileges.