CVE-2026-44451
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Lumiverse prior to 0.9.7 has a vulnerability in the component override system that transpiles TSX via Sucrase and executes it with new Function, shadowing dangerous globals. Static protection and shadowing are bypassed by reconstructing identifiers from string fragments and DOM sandbox escape. A malicious theme pack (.lumitheme) can execute code in an authenticated user's session.
Risk Assessment
An attacker can execute arbitrary JavaScript in the context of the victim's session, leading to data theft or account takeover.
Recommendation
Update Lumiverse to version 0.9.7 or later.
Original NVD description (English source)
Lumiverse is a full-featured AI chat application. Prior to 0.9.7, the component override system transpiles user-supplied TSX via Sucrase and evaluates it with new Function, shadowing dangerous globals (fetch, window, eval, etc.) with undefined. A static source validator (validateComponentOverrideSource) additionally blocks these identifiers by word-boundary regex. Both controls are bypassed. String-split bypass of the static validator: any blocked identifier can be reconstructed at runtime from string fragments ('ownerDoc' + 'ument'). DOM ref escape from the sandbox: useRef and useEffect are provided in scope. A ref attached to a rendered element gives a live DOM node. From any real DOM node, node['ownerDoc'+'ument']['def'+'aultView'] yields the real window, bypassing all identifier shadows. Theme packs (.lumitheme / .lumiverse-theme) are the shareable delivery mechanism. A malicious pack is an exploit path: the victim imports the file, enables one component override in the Theme Editor, and the payload fires in their authenticated session.This vulnerability is fixed in 0.9.7.