EUVD-2026-44843
GHSA-vvf7-cx4c-9x2c
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CSRF requires a logged-in admin to visit a malicious page (UI:R) and is blind (C:N); it forges state-changing script edits giving high integrity impact (I:H).
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive request mapping
AnalysisAI
Cross-Site Request Forgery in the xxl-job-admin console of XXL-JOB v3.0.0 lets remote attackers silently modify Glue IDE shell scripts by tricking an authenticated administrator into triggering a forged request. Because Glue scripts are executed by the scheduler's worker nodes, unauthorized script modification can escalate into arbitrary command execution across the job-execution fabric. Publicly available exploit/PoC code appears to exist via a CVE-specific GitHub repository; there is no CISA KEV listing and EPSS is low (0.27%, 18th percentile).
Technical ContextAI
XXL-JOB is a widely used open-source distributed task-scheduling platform (Java/Spring Boot) where the 'xxl-job-admin' component is the central web dashboard that manages jobs and dispatches them to executor nodes. Its 'Glue' feature is an in-browser IDE that lets operators author and edit shell/script tasks which are then compiled and run by executors. The root cause is CWE-352 (Cross-Site Request Forgery): the script-update endpoint neither validates an anti-CSRF token nor restricts HTTP methods, using a permissive request mapping that accepts arbitrary verbs. As a result, any cross-origin page loaded by a logged-in admin's browser can issue a state-changing request that the server processes using the victim's ambient session cookie. The CPE data (cpe:2.3:a:n/a:n/a) is a placeholder and provides no additional product identification beyond the description.
RemediationAI
No vendor-released patch version is identified in the available data, so the primary compensating controls should be applied while monitoring the XXL-JOB project for a fixed release. Concretely: place the xxl-job-admin console behind a VPN or IP allow-list so it is not reachable from arbitrary origins, which removes the drive-by CSRF exposure but requires operators to connect through the restricted path; enforce SameSite=Strict (or Lax) on the admin session cookie to prevent cross-site requests from carrying the session, with the trade-off of breaking any legitimate cross-origin embedding; restrict the offending script-update endpoint to POST-only and add a synchronizer anti-CSRF token if a custom build or reverse-proxy rule can enforce it; and consider disabling or tightly restricting use of the Glue IDE feature for accounts that do not require it, accepting reduced script-authoring convenience. Administrators should also avoid browsing untrusted sites in sessions where they are logged into the console. Track the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-26718) for an official fix.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today