Skyhook Radar up to 1.12.1 HandleLocalTerminal /api/local-terminal access control

Summaryinfo

A vulnerability was found in Skyhook Radar up to 1.12.1. It has been declared as very critical. This impacts an unknown function of the file /api/local-terminal of the component HandleLocalTerminal. Executing a manipulation can lead to access control. The identification of this vulnerability is CVE-2026-82026. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as very critical was found in Skyhook Radar up to 1.12.1. This vulnerability affects some unknown processing of the file /api/local-terminal of the component HandleLocalTerminal. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check instead of role-based access control. Attackers can connect to the endpoint to execute /bin/bash -l on the Radar host with Radar's own kubeconfig and process credentials injected into the shell environment, achieving remote code execution with Radar's privileges even when the --disable-local-terminal flag is set.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-82026 since 08/27/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 10/14/2026). The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading to version 1.12.2 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Skyhook

Name

• Radar

Version

• 1.12.0
• 1.12.1

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion