CVE-2022-31137

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function without processing the inputs received from the user in the /app/options.py file. Attackers need not be authenticated to exploit this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-78
• CWE-78

• http://packetstormsecurity.com/files/167805/Roxy-WI-Remote-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/171648/Roxy-WI-6.1.0.0-Improper-Authentication-Control.html
• http://packetstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/172547/Roxy-WI-6.1.0.0-Remote-Command-Execution.html
• https://github.com/hap-wi/roxy-wi/commit/82666df1e60c45dd6aa533b01a392f015d32f755Patch, Third Party Advisory
• https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-53r2-mq99-f532Third Party Advisory
• http://packetstormsecurity.com/files/167805/Roxy-WI-Remote-Command-Execution.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/171648/Roxy-WI-6.1.0.0-Improper-Authentication-Control.html
• http://packetstormsecurity.com/files/171652/Roxy-WI-6.1.1.0-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/172547/Roxy-WI-6.1.0.0-Remote-Command-Execution.html
• https://github.com/hap-wi/roxy-wi/commit/82666df1e60c45dd6aa533b01a392f015d32f755Patch, Third Party Advisory
• https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-53r2-mq99-f532Third Party Advisory

Published

Jul 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31131Nextcloud mail is a Mail app for the Nextcloud home server p…4.3
• CVE-2022-31132Nextcloud Mail is an email application for the nextcloud per…9.8
• CVE-2022-31133HumHub is an Open Source Enterprise Social Network. Affected…4.8
• CVE-2022-31134Zulip is an open-source team collaboration tool. Zulip Serve…4.9
• CVE-2022-31135Akashi is an open source server implementation of the Attorn…7.5
• CVE-2022-31136Bookwyrm is an open source social reading and reviewing prog…6.1
• CVE-2022-31138mailcow is a mailserver suite. Prior to mailcow-dockerized v…8.8
• CVE-2022-31139UnsafeAccessor (UA) is a bridge to access jdk.internal.misc.…7.5
• CVE-2022-3114An issue was discovered in the Linux kernel through 5.16-rc6…5.5
• CVE-2022-31140Valinor is a PHP library that helps to map any input into a …9.1
• CVE-2022-31142@fastify/bearer-auth is a Fastify plugin to require bearer A…7.5
• CVE-2022-31143GLPI stands for Gestionnaire Libre de Parc Informatique and …5.3