CVE-2026-53970
Received Received - Intake

Missing Integrity Check in ZeroBrew Ruby Shim

Publication date: 2026-08-14

Last updated on: 2026-08-14

Assigner: VulnCheck

Description
ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can intercept or replace downloads for secondary resource and patch paths in shim.rb, injecting attacker-controlled build steps or source tree modifications that execute during source builds via 'zb install --build-from-source' without any integrity warning.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-14
Last Modified
2026-08-14
Generated
2026-08-14
AI Q&A
2026-08-14
EPSS Evaluated
N/A
NVD
CVE-2026-53970
EUVD
EUVD-2026-58684

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
lucasgelfond zerobrew to 0.3.2 (exc)
zerobrew zerobrew to 0.3.1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-494 The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

ZeroBrew versions 0.3.1 and prior have a missing integrity verification flaw in the Ruby compatibility shim (shim.rb). This allows network attackers to replace legitimate downloads with malicious content at formula resource or patch URLs without checksum validation. Attackers can intercept downloads and inject malicious build steps or source tree modifications during source builds via 'zb install --build-from-source' without triggering warnings.

Detection Guidance

Check if your ZeroBrew installation is version 0.3.1 or earlier by running 'zb --version'. If the version is vulnerable, inspect shim.rb for missing checksum validation in resource or patch URL handling. Monitor network traffic for unexpected downloads during 'zb install --build-from-source'.

Impact Analysis

If you use ZeroBrew 0.3.1 or earlier, an attacker could replace package downloads with malicious code during installation or updates. This could lead to arbitrary code execution on your system, potentially compromising data, installing malware, or gaining unauthorized access. The attack requires network interception or manipulation of download paths.

Compliance Impact

This vulnerability could lead to unauthorized code execution, potentially violating data integrity and confidentiality requirements under GDPR and HIPAA. If exploited, it may result in unauthorized access to sensitive data, breaching compliance for data protection and security controls.

Mitigation Strategies

Upgrade ZeroBrew to version 0.3.2 or later immediately. Avoid using 'zb install --build-from-source' until patched. Review and verify all downloaded resources and patches manually if using older versions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53970. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart