Description

The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary commands on the KaliFast server with www-data privileges. Fixed in version 2026061802.

Related CPE's

Could not find any relations

References

https://advisories.orangecyberdefense.com/advisories/166

Weaknesses

6064c9f1-42e5-4cc5-a67a-1636d7a9d3fd

Secondary
CWE-78

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

6064c9f1-42e5-4cc5-a67a-1636d7a9d3fd

Vulnerability status

Deferred

Published

2026-10-28T12:17:40.227Z

4 hours ago

Last modified

2026-10-28T15:24:56.033Z

53 minutes ago