Metalama's Visual Studio inter-process named pipe allows unsafe deserialization that enables local code execution

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. From 2023.0.101-rc until 2025.1.18, 2026.0.25 and 2026.1.19, the Windows Visual Studio integration deserializes local named-pipe messages without restricting which CLR types can be instantiated. The pipe connects devenv, the out-of-process Roslyn code-analysis process and the CodeLens process, and has the predictable name Metalama_{role}_{processId}_{hash(PackageVersion)}. Releases from the first public 2023.0 line through 2026.0.x use Newtonsoft.Json with TypeNameHandling.All; the later SerializationBinder only remaps assembly names, and BindToType resolves arbitrary wire-supplied types without an allow-list. Releases 2026.1.0 through 2026.1.18 use typeless MessagePack with TypelessObjectResolver and likewise instantiate arbitrary types. A same-user local process able to write to the pipe can send crafted messages that lead to arbitrary code execution with confidentiality, integrity and availability impacts inside the affected Visual Studio process. Default Windows pipe ACLs limit writers to the same logged-in user, so this does not escalate privileges or cross a security boundary; command-line and MSBuild-only builds do not use the channel. The maintained Metalama + PostSharp extension is affected from 2024.1 through 2026.1.4, while earlier Metalama-free PostSharp versions are unaffected. The retired Metalama and Caravela extensions remain affected and require removal or migration. The framework issue is fixed in versions 2025.1.18, 2026.0.25 and 2026.1.19; the maintained Metalama + PostSharp Visual Studio extension is fixed in version 2026.1.5. The retired Metalama and Caravela extensions require removal or migration.

Etkilenen sürümler1 yazılım

Kaynaklar9 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/…talama/security/advisories/GHSA-h26j-4vp7-x9w2 Diğer
• github.com/metalama/Metalama/pull/1651 Diğer
• github.com/…ommit/5b4ced29f2b25631cc2e44d05b0fd5fe838b6cbe Diğer
• github.com/…ommit/d97f52e1b53ffe4176b2b05c56ffdf1ccd2f53a9 Diğer
• github.com/metalama/Metalama/releases/tag/release/2025.1.18 Diğer
• github.com/metalama/Metalama/releases/tag/release/2026.0.25 Diğer
• github.com/metalama/Metalama/releases/tag/release/2026.1.19 Diğer

Kayıt geçmişi

1. 30 Eki 2026 23:19Yayımlandı

İlgili açıklar

• 8,2 CVE-2026-62847Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS)
• 8,7 CVE-2026-63393OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution
• 8,8 CVE-2026-118938Fickling check_safety() bypass: dotted __qualname__ in STACK_GLOBAL resolves a class-method attribute path that evades call analysis
• 8,8 CVE-2026-16760Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables
• 8,8 CVE-2026-118090WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability
• 7,2 CVE-2026-118089WordPress Product Feed Manager plugin <= 7.14.1 - PHP Object Injection vulnerability