Approved changes feed: RSS · Atom
cpe:2.3:a:komodo:komodo:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Komodo (a5b0f3f9-6ce6-5d2b-b424-839167a56c56) |
|---|---|
| Product | Komodo (b45608b4-1eaa-58b6-aedf-7ef52af560fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110005 |
vulnerable | 2026-11-03 10:16:00.989428 |
Moghtech Komodo contains an OS command injection vulnerability
The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execute`, or `Read` plus `Logs`, permission on a managed server can supply shell metacharacters in a container name processed by the `DestroyContainer` or `SearchContainerLog` operations. The container name is interpolated without escaping into a command executed using `sh -c`, allowing arbitrary commands to execute as root on the managed host. This permits a user without Komodo's `Terminal` permission to obtain unrestricted host-level command execution.
Published: 2026-10-13T19:23:52.191Z
Updated: 2026-10-20T17:48:06.015Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.