OpenC3 COSMOS Vulnerable to Directory Traversal via openc3-api/tables endpoint

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-28382 · ADVISORY
• OpenC3/cosmos#1828 · WEB
• OpenC3/cosmos commit fc7e113 · WEB
• OpenC3/cosmos · PACKAGE
• OpenC3/cosmos release v6.1.0 · WEB
• rubysec/ruby-advisory-db · WEB
• openc3.com · WEB
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · WEB
• openc3.com · Product
• visionspace.com/openc3-cosmos-a-security-assessment-of-an-open-source-mission-framework · Exploit

Más vulnerabilidades de openc3

• CVE-2026-42088ALTO 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42087CRÍTICO 9.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 t…
• CVE-2026-42086MEDIO 4.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0…
• CVE-2026-42085MEDIO 4.3OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…
• CVE-2026-42084ALTO 8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to versions 6.…