CVE-2026-25855
Last modified
CVE-2026-25855 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.sh) through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources, causing the server to execute the scripts and return output as proxy lines, resulting in arbitrary command execution on the host as the process user.. EPSS estimates a 0.57% chance of exploitation in the next 30 days.
Description
OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to execute arbitrary commands by uploading script files (.bat.ps1.sh) through the FileProxySource proxy loading feature. Attackers can upload malicious script files as proxy sources, causing the server to execute the scripts and return output as proxy lines, resulting in arbitrary command execution on the host as the process user.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-25855?
How severe is CVE-2026-25855?
How do I fix CVE-2026-25855?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-25847In JetBrains PyCharm before 2025.3.2 a DOM-based XSS on Jupy…6.1
- CVE-2026-25848In JetBrains Hub before 2025.3.119807 authentication bypass …9.8
- CVE-2026-25850in OpenHarmony v6.0 and prior versions allow a local attacke…5.5
- CVE-2026-25851WebSocket endpoints lack proper authentication mechanisms, e…9.8
- CVE-2026-25852Local privilege escalation due to DLL hijacking vulnerabilit…6.7
- CVE-2026-25854Occasional URL redirection to untrusted Site ('Open Redirect…6.1
- CVE-2026-25856OpenBullet2 through version 0.3.2 contains an authenticated …8.8
- CVE-2026-25857Tenda G300-F router firmware version 16.01.14.2 and prior co…8.8
- CVE-2026-25858macrozheng mall version 1.0.3 and prior contains an authenti…9.3
- CVE-2026-25859Wekan versions prior to 8.20 allow non-administrative users …8.8
- CVE-2026-2586An authenticated Remote Code Execution (RCE) vulnerability w…9.1
- CVE-2026-25860OpenClinic GA 5.351.19 contains a reflected cross-site scrip…6.1
Are you affected by CVE-2026-25855?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST