https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 20:09:59 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-110005 <p>The `periphery` agent&#39;s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo&#39;s `Terminal` permission to obtain unrestricted host-level command execution.</p> <p>The `periphery` agent&#39;s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo&#39;s `Terminal` permission to obtain unrestricted host-level command execution.</p> https://db.gcve.eu/vuln/fkie_cve-2026-110005 https://db.gcve.eu/vuln/ghsa-hxg3-3gpg-5m9c <p>The `periphery` agent&#39;s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo&#39;s `Terminal` permission to obtain unrestricted host-level command execution.</p> <p>The `periphery` agent&#39;s container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo&#39;s `Terminal` permission to obtain unrestricted host-level command execution.</p> https://db.gcve.eu/vuln/ghsa-hxg3-3gpg-5m9c