OliveTin OS Command Injection vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-50946 · ADVISORY
• OliveTin/OliveTin · PACKAGE
• OliveTin/OliveTin · WEB
• chrisWalker11/Cves · WEB
• GitHub Advisory GHSA-p3qf-84rg-jxfc · ADVISORY

Weitere Schwachstellen in github.com/OliveTin/OliveTin

• CVE-2026-53541MITTEL 4.3OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is inte…
• CVE-2026-67439MITTEL 4.3OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go…
• CVE-2026-67438MITTEL 6.6OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/argume…
• CVE-2026-67437HOCH 7.5OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/r…
• CVE-2026-48709NIEDRIG 3.7OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, The ValidateArgumentType RPC endpoi…