| Название | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| Описание | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| Источник | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| Пользователь | Ana10gy (UID 93358) |
|---|
| Представление | 04.01.2026 15:26 (9 месяцы назад) |
|---|
| Модерация | 16.01.2026 20:14 (12 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 341631 [bastillion-io Bastillion до 4.0.1 Public Key Management System AuthKeysKtrl.java эскалация привилегий] |
|---|
| Баллы | 18 |
|---|