CVE-2026-63325

Redocly CLI and @redocly/respect-core before version 2.33.0 dynamically evaluate $faker runtime expressions embedded in Arazzo descriptions when the 'respect' command runs, and a crafted expression can traverse constructor, prototype, or __proto__ chains in the context parser (packages/respect-core/src/modules/context-parser/get-value-from-context.ts) to reach the JavaScript Function constructor. An attacker who can supply or modify an Arazzo description that a victim processes — for example a third-party workflow file pulled into a repository or pipeline — gains arbitrary code execution with the privileges of the CLI process, including the ability to run shell commands and read CI secrets. Users who only process trusted, self-authored workflows are not affected. The flaw is code injection (CWE-94, CWE-95) reached via prototype pollution; there is no known public proof-of-concept, it is not in CISA KEV, and no in-the-wild exploitation has been reported.

What to do: Upgrade @redocly/cli and @redocly/respect-core to version 2.33.0 or later (check package.json/lockfiles and CI dependency pins). Until patched, do not run 'respect' against Arazzo descriptions from untrusted sources such as external repositories, pull requests, or downloaded files. Audit CI jobs that invoke these tools for accessible secrets, and rotate any CI secrets exposed to jobs that have processed untrusted descriptions.