Command injection in samba-client

CRITICO 9.8CVE-2021-27185 · GHSA-r3j7-x2g5-9gx6 · Published 10/02/2021 · updated 17/06/2026

In breve

CVE-2021-27185 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda samba-client (samba-client project), samba-client.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.9%, superiore al 92.1% delle vulnerabilità.
Correzione: aggiornare a 4.0.0 o successiva.

Package	Affected versions	Patched versions
samba-client samba-client_project	`< 4.0.0`	`4.0.0`
samba-client npm	`< 4.0.0`	`4.0.0`

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.

NVD description

The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.