OliveTin OS Command Injection vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-50946 · ADVISORY
• OliveTin/OliveTin · PACKAGE
• OliveTin/OliveTin · WEB
• chrisWalker11/Cves · WEB
• GitHub Advisory GHSA-p3qf-84rg-jxfc · ADVISORY

github.com/OliveTin/OliveTin のその他の脆弱性

• CVE-2026-53541中 4.3OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is inte…
• CVE-2026-67439中 4.3OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go…
• CVE-2026-67438中 6.6OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/argume…
• CVE-2026-67437高 7.5OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/otoauth2/r…
• CVE-2026-48709低 3.7OliveTin gives access to predefined shell commands from a web interface. In versions 3000.0.0 and prior, The ValidateArgumentType RPC endpoi…