CVE-2018-18555

A sandbox escape issue was discovered in VyOS 1.1.8. It provides a restricted management shell for operator users to administer the device. By issuing various shell special characters with certain commands, an authenticated operator user can break out of the management shell and gain access to the underlying Linux shell. The user can then run arbitrary operating system commands with the privileges afforded by their account.

• CWE-78

• https://blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releasesExploit, Vendor Advisory
• https://blog.vyos.io/the-operator-level-is-proved-insecure-and-will-be-removed-in-the-next-releasesExploit, Vendor Advisory

Published

Dec 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-18547Vesta Control Panel through 0.9.8-22 has XSS via the edit/we…
• CVE-2018-18548ajenticp (aka Ajenti Docker control panel) for Ajenti throug…
• CVE-2018-18550ServersCheck Monitoring Software before 14.3.4 allows SQL In…
• CVE-2018-18551ServersCheck Monitoring Software through 14.3.3 has Persiste…
• CVE-2018-18552ServersCheck Monitoring Software through 14.3.3 allows local…
• CVE-2018-18553Leanote 2.6.1 has XSS via the Blog Basic Setting title field…
• CVE-2018-18556A privilege escalation issue was discovered in VyOS 1.1.8. T…9.9
• CVE-2018-18557LibTIFF 3.9.3, 3.9.4, 3.9.5, 3.9.6, 3.9.7, 4.0.0alpha4, 4.0.…
• CVE-2018-18558An issue was discovered in Espressif ESP-IDF 2.x and 3.x bef…
• CVE-2018-18559In the Linux kernel through 4.19, a use-after-free can occur…8.1
• CVE-2018-18561An issue was discovered in Roche Accu-Chek Inform II Base Un…
• CVE-2018-18562An issue was discovered in Roche Accu-Chek Inform II Base Un…