Logo
Retour à la veille

CVE-2026-73667

Publié : 13 août 2026
Modifié : 13 août 2026
Lien officiel NVD
Score CVSS
8.8
HIGH

Description détaillée

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.0-rc.2, OpenChoreo Workflow Plane templates under samples/getting-started/workflow-templates/ interpolated developer-controlled workflow parameters into shell program text executed through sh -c instead of passing the values through container.env, allowing arbitrary commands to run in workflow pods while affected privileged Podman templates lacked hostUsers: false. This issue is fixed in versions 1.0.4, 1.1.4, and 1.2.0-rc.2.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/openchoreo/openchoreo/commit/017c3c6d8b27c21d11c8c2b43da1846aa7ae73b9https://github.com/openchoreo/openchoreo/commit/65c081ff74618714cb0c82b5d0e0fad2c2cbc46bhttps://github.com/openchoreo/openchoreo/commit/b274127a4342e5433c5035384cef57478b5b65edhttps://github.com/openchoreo/openchoreo/commit/fb2b659b9884eb45fa4f02b9cc7e89718a0276b7https://github.com/openchoreo/openchoreo/pull/4193https://github.com/openchoreo/openchoreo/pull/4243https://github.com/openchoreo/openchoreo/pull/4277https://github.com/openchoreo/openchoreo/pull/4297https://github.com/openchoreo/openchoreo/releases/tag/v1.0.4https://github.com/openchoreo/openchoreo/releases/tag/v1.1.4https://github.com/openchoreo/openchoreo/releases/tag/v1.2.0-rc.2https://github.com/openchoreo/openchoreo/security/advisories/GHSA-2mw5-23gm-pccq

Dernières Vulnérabilités

CVE-2026-19771

A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web Interface. Such manipulation of the argument MaxHops/Timeout/Size leads to os command injection. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

VOIR DÉTAILS

CVE-2026-19770

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

VOIR DÉTAILS

CVE-2026-19767

A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

VOIR DÉTAILS