CVE-2017-8799

Untrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other iRODS users (potentially anonymous) to execute remote shell commands via iRODS virtual pathnames. To exploit this vulnerability, a virtual iRODS pathname that includes a semicolon would be retrieved via igetwild. Because igetwild is a Bash script, the part of the pathname following the semicolon would be executed in the user's shell.

• CWE-78

• https://github.com/irods/irods/issues/3452Issue Tracking, Patch, Third Party Advisory
• https://github.com/irods/irods/issues/3452Issue Tracking, Patch, Third Party Advisory

Published

May 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-8793An issue was discovered on Accellion FTA devices before FTA_…
• CVE-2017-8794An issue was discovered on Accellion FTA devices before FTA_…
• CVE-2017-8795An issue was discovered on Accellion FTA devices before FTA_…
• CVE-2017-8796An issue was discovered on Accellion FTA devices before FTA_…
• CVE-2017-8797The NFSv4 server in the Linux kernel before 4.11.3 does not …7.5
• CVE-2017-8798Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221…
• CVE-2017-8801Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent M…
• CVE-2017-8802Cross-site scripting (XSS) vulnerability in Zimbra Collabora…
• CVE-2017-8803Notepad++ 7.3.3 (32-bit) with Hex Editor Plugin v0.9.5 might…7.8
• CVE-2017-8804The xdr_bytes and xdr_string functions in the GNU C Library …
• CVE-2017-8805Debian ftpsync before 20171017 does not use the rsync --safe…
• CVE-2017-8806The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecl…5.5