| 标题 | bastillion-io Bastillion SSH Key Manager <=4.0.1 Command Injection |
|---|
| 描述 | A command injection vulnerability has been identified in the system management module. Authenticated users with system creation or edit privileges can inject malicious commands by manipulating the authorized_keys path parameter, which are then executed on remote systems during SSH key distribution operations. |
|---|
| 来源 | ⚠️ https://github.com/AnalogyC0de/public_exp/blob/main/archives/Bastillion/report2.md |
|---|
| 用户 | Ana10gy (UID 93358) |
|---|
| 提交 | 2026-01-04 15時52分 (9 月前) |
|---|
| 管理 | 2026-01-16 20時14分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 341632 [bastillion-io Bastillion 直到 4.0.1 System Management SystemKtrl.java 权限提升] |
|---|
| 积分 | 18 |
|---|