| tiêu đề | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| Mô tả | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| Nguồn | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| Người dùng | Ana10gy (UID 93358) |
|---|
| Đệ trình | 04/01/2026 15:26 (cách đây 10 các tháng) |
|---|
| Kiểm duyệt | 16/01/2026 20:14 (12 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 341631 [bastillion-io Bastillion đến 4.0.1 Public Key Management System AuthKeysKtrl.java nâng cao đặc quyền] |
|---|
| điểm | 18 |
|---|