CVE-2026-123025

An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and gcloud_project into a shell command passed to proc_open() via LeUtils::run_shell_command() without any validation or escaping. A remote authenticated user with privileges to issue or renew certificates through the WebGUI/API can achieve arbitrary code execution as root.

• CWE-78

• https://github.com/opnsense/plugins/pull/5873

Published

Nov 5, 2026

Last Modified

Nov 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-123019A weakness has been identified in eosphoros-ai DB-GPT up to …7.3
• CVE-2026-12302Mitigation bypass in the DOM: Security component. This vulne…6.5
• CVE-2026-123020A security vulnerability has been detected in eosphoros-ai D…6.3
• CVE-2026-123022A vulnerability was detected in agentscope-ai AgentScope up …7.3
• CVE-2026-123023A flaw has been found in agentscope-ai AgentScope up to 2.0.…7.3
• CVE-2026-123024A vulnerability has been found in agentscope-ai AgentScope u…7.3
• CVE-2026-123028A vulnerability was identified in itsourcecode Online Book S…7.3
• CVE-2026-123029Wowza Streaming Engine before 4.12.2 processes XML external …7.5
• CVE-2026-12303Information disclosure due to incorrect boundary conditions …4.3
• CVE-2026-123032A security flaw has been discovered in OpenBMB Internet of A…7.3
• CVE-2026-123033Authentication bypass in the HA heartbeat origin check in mi…8.3
• CVE-2026-123036A flaw was found in ansible-core. When a task marked `no_log…5.5