| 标题 | bastillion-io Bastillion <=4.0.1 Command Injection |
|---|
| 描述 | A command injection vulnerability has been identified in the public key management system. Authenticated users with public key upload privileges can inject malicious commands by including specially crafted content in their public keys, which are then executed on remote systems during SSH key distribution operations. |
|---|
| 来源 | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report1.md |
|---|
| 用户 | Ana10gy (UID 93358) |
|---|
| 提交 | 2026-01-04 15時26分 (9 月前) |
|---|
| 管理 | 2026-01-16 20時14分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 341631 [bastillion-io Bastillion 直到 4.0.1 Public Key Management System AuthKeysKtrl.java 权限提升] |
|---|
| 积分 | 18 |
|---|