EUVD-2026-53932
GHSA-xj9x-9j3p-fff9
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network POST to /api/fs/exec on default config gives arbitrary command execution as the app user, so PR:N/UI:N/AC:L with full C/I/A impact; scope unchanged as execution stays within the app's OS user.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
3DescriptionCVE.org
OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary shell commands by sending crafted POST requests to the /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn() without any allowlist, blocklist, or argument validation. The authentication middleware becomes a no-op when UI_PASSWORD is not configured, matching the default Docker deployment, enabling attackers to execute arbitrary OS commands as the application user and retrieve full command output including stdout, stderr, and exit code from the server response.
Articles & Coverage 2
AnalysisAI
Unauthenticated remote code execution in OpenChamber 1.11.7 lets remote attackers run arbitrary OS commands by POSTing to the /api/fs/exec endpoint, which hands input directly to Node.js spawn() with no allowlist, blocklist, or argument sanitization. Because the authentication middleware silently no-ops when UI_PASSWORD is unset - the state of the default Docker deployment - the endpoint is reachable without credentials and returns full stdout, stderr, and exit code to the attacker. Reported by VulnCheck; there is no public exploit identified at time of analysis and it is not listed in CISA KEV, though the flaw is trivially exploitable.
Technical ContextAI
OpenChamber is a Node.js/Electron application (with a web server component under packages/web and a desktop shell under packages/electron) that exposes an HTTP API. The vulnerability is a classic OS Command Injection (CWE-78): the /api/fs/exec route passes caller-supplied commands verbatim to Node.js child_process spawn() without validating the command name or its arguments, so any string an attacker supplies is executed by the underlying OS shell context as the application user. The core failure is compounded by an authentication design flaw - the auth middleware becomes a pass-through when the UI_PASSWORD environment variable is not set. Per the CPE cpe:2.3:a:bohdan_triapitsyn:openchamber:*, the affected component is the OpenChamber application itself; the vendor fix (docker-compose.yml changes) makes OPENCHAMBER_UI_PASSWORD a required variable that fails startup if unset when exposed via Docker, and the Electron main process was hardened to refuse LAN binding when no desktop UI password is configured.
RemediationAI
Apply the upstream fix from commit https://github.com/openchamber/openchamber/commit/f1b9506132faf6c564a2694c7f33b94421a49b4a; a released patched version tag was not provided in the input, so upgrade to the vendor's latest release that includes this commit and verify it is present. The fix makes OPENCHAMBER_UI_PASSWORD mandatory in docker-compose.yml (startup fails if unset when exposed via Docker) and stops the Electron shell from binding to the LAN when no desktop UI password is configured. As an immediate compensating control before patching, set a strong UI password (e.g. OPENCHAMBER_UI_PASSWORD="$(openssl rand -base64 24)") to re-enable the auth middleware; restrict network exposure by binding OpenChamber to loopback (127.0.0.1) instead of 0.0.0.0, or place it behind a reverse proxy / firewall that blocks external access to the /api/fs/exec endpoint. Note trade-offs: binding to loopback breaks legitimate remote/LAN access, and blocking /api/fs/exec at the proxy will disable any feature that legitimately relies on that endpoint. Consult the VulnCheck advisory (https://www.vulncheck.com/advisories/openchamber-unauthenticated-rce-via-api-fs-exec) for details.
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
runc through version 1.0-rc6 (used in Docker before 18.09.2) contains a container escape vulnerability that allows attac
Netmaker makes networks with WireGuard. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no a
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
The News & Blog Designer Pack - WordPress Blog Plugin - (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
Docker 1.3.2 allows remote attackers to execute arbitrary code with root privileges via a crafted (1) image or (2) build
Remote code execution in Gogs through 0.14.2 allows authenticated users (and unauthenticated attackers on default-config
Unauthenticated remote command injection in SGWBOX N3 firmware 2.0.25 lets attackers execute arbitrary operating-system
Remote code execution in Flowise before 3.1.2 allows any authenticated user (or API caller with chatflow view/update per
Remote code execution in NocoBase Workflow Script Node (npm @nocobase/plugin-workflow-javascript) allows authenticated l
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-c
Same weakness CWE-78 – OS Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today