Description
Serverless Framework 未授权 命令注入漏洞
Serverless Framework 未授权 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/serverless/serverless/security/advisories/GHSA-rwc2-f344-q6w6
https://nvd.nist.gov/vuln/detail/CVE-2025-69256
https://www.sentinelone.com/vulnerability-database/cve-2025-69256/
https://www.geordie.ai/resources/technical-advisory-serverless-framework-mcp-server-command-injection
https://dev.to/cverports/cve-2025-69256-serverless-command-injection-when-experimental-means-remote-shell-3g2d