Security Advisory

CVE-2026-32102

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-11 20:05:16

Last updated 2026-03-12 19:47:37

Assigner GitHub_M

State PUBLISHED

Description

OliveTin gives access to predefined shell commands from a web interface. In 3000.10.2 and earlier, OliveTin’s live EventStream broadcasts execution events and action output to authenticated dashboard subscribers without enforcing per-action authorization. A low-privileged authenticated user can receive output from actions they are not allowed to view, resulting in broken access control and sensitive information disclosure.

← Browse all CVEs View on cve.org ↗