---
id: CVE-2026-89036
title: >-
  Appwrite before 2.0.0 contains an argument injection vulnerability that allows
  authenticated users with functions.write or sites.write permissions to execute
  arbitrary commands by injecting TAB characters into the providerRootDirectory
  p…
summary: >-
  Appwrite before 2.0.0 contains an argument injection vulnerability that allows
  authenticated users with functions.write or sites.write permissions to execute
  arbitrary commands by injecting TAB characters into the providerRootDirectory
  p…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-88
vendor: appwrite
product: appwrite
affected:
  - appwrite < 2.0.0
published: '2026-09-17'
updated: '2026-09-22'
sourceUpdated: '2026-09-22T20:25:55.870'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89036'
references:
  - url: >-
      https://github.com/appwrite/appwrite/commit/a82dc6e386a6ac7b88e853a1e6fdb59e0b79ddca
    label: disclosure@vulncheck.com
  - url: 'https://github.com/appwrite/appwrite/pull/13028'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/appwrite/appwrite/releases#release-2.0.0'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/appwrite-argument-injection-via-providerrootdirectory-parameter
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
epss: 0.00702
epssPercentile: 0.51235
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-17T17:01:26.669709Z'
ingestedAt: '2026-09-17T16:21:47.717Z'
---

## Overview

Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory parameter used to construct GNU tar commands. The application uses escapeshellcmd instead of escapeshellarg and fails to quote the parameter, allowing TAB characters to survive sanitization and be interpreted as argument separators, enabling injection of arbitrary GNU tar arguments such as --checkpoint-action=exec to achieve remote code execution as the builds worker process user.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.