Beveiligingsadvies

CVE-2026-88889

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-10 13:05:38

Laatst bijgewerkt 2026-09-10 15:05:38

Toegewezen door VulnCheck

CVSS-score 8.5

Status PUBLISHED

Beschrijving

Renovate before 44.14.7 contains a command injection vulnerability in the Maven Wrapper manager that allows attackers to execute arbitrary commands by specifying a malicious distributionType parameter in maven-wrapper.properties. Attackers can inject shell commands through unescaped distributionType values to achieve remote code execution when Renovate processes Maven Wrapper updates in binarySource=docker mode.

← Alle CVE's bekijken Bekijk op cve.org ↗