CVE-2026-33630: c-ares CVE-2026-33630 RCE primitive construction from confirmed remote UAF (REPRO-2026-00263)

Pruva

Verified reproduction

CVE-2026-33630: c-ares CVE-2026-33630 RCE primitive construction from confirmed remote UAF

CVE-2026-33630 is verified against c-ares/c-ares · c affected versions: >1.32.3 through 1.34.6 fixed version: 1.34.7 vulnerability class: RCE This high reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00263.

REPRO-2026-00263 c-ares/c-ares · c RCE Variant found Jul 7, 2026 .txt

Severity HIGH

Confidence HIGH

Reproduced in 54m 27s

Tool calls 252

Spend $14.17

Affected >1.32.3 through 1.34.6

Fixed in 1.34.7

01 · Reproduce

Download script Open in Codespaces → Variant script

$ pruva-verify REPRO-2026-00263

or

curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00263/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh

Run in a VM or disposable container. This exploits a real vulnerability.

02 · The vulnerability

CVE-2026-33630 c-ares RCE exploitability follow-up.

03 · Root cause

Variant analysis

04 · Reproduction transcript

The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.

Loading session...

05 · Artifacts

Scripts, logs, diffs, and output captured during the reproduction.

bundle/artifact_promotion_manifest.json10.3 KB

bundle/artifact_promotion_report.json10.3 KB

bundle/vuln_variant/source_identity.json1.0 KB

bundle/vuln_variant/root_cause_equivalence.json1.5 KB

bundle/logs/reproduction_steps.log28.8 KB

bundle/repro/rce_reclaim_harness.c13.2 KB

bundle/repro/rca_report.md8.7 KB

bundle/repro/validation_verdict.json1.0 KB

bundle/repro/runtime_manifest.json1.6 KB