CyberRota Analysis
AI-GeneratedThe internment crate version 0.8.7 for Rust contains a rogue dependency that can execute malicious code during project compilation, potentially allowing attackers to gain control over affected systems. This critical vulnerability poses a significant risk to developers and organizations using this crate in their Rust projects. Immediate attention is required from teams utilizing this version to mitigate the risk of arbitrary code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency that registers with a command-and-control server to offer arbitrary code execution.