CVE-2026-22785 | orval-labs orval up to 7.17.x OpenAPI Summary command injection (GHSA-mwr6-3gp8-9jmj)

A vulnerability labeled as critical has been found in orval-labs orval up to 7.17.x. Affected is an unknown function of the component OpenAPI. Executing a manipulation of the argument Summary can lead to command injection.

The identification of this vulnerability is CVE-2026-22785. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.