CERT24GHSA-64mg-3wpj-rcr6: Arbitrary operating system command execution in openEQUELLALoading data…

GHSA-64mg-3wpj-rcr6: Arbitrary operating system command execution in openEQUELLA

Before openEQUELLA 2026.1, the system.execute() function available to the scripting engine can run supplied operating system commands without validation or an allow-list of permitted executables.

← Back to intelligence

GHSA-64mg-3wpj-rcr6: Arbitrary operating system command execution in openEQUELLA

Before openEQUELLA 2026.1, the system.execute() function available to the scripting engine can run supplied operating system commands without validation or an allow-list of permitted executables.