EUVD-2026-70199Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network-reachable diagnostic API with no user interaction; command injection yields full host code execution, so AV:N/AC:L/PR:N/UI:N and C/I/A:H.
Primary rating from Vendor (github).
CVSS VectorVendor: github
Lifecycle Timeline
5DescriptionCVE.org
Looking Glass is a modern, stateless network-diagnostic platform - a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC (ConnectRPC) API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there is an OS Command Injection vulnerability resulting from an unanchored regular expression in the input validation layer. This issue has been patched in version 1.3.5.
AnalysisAI
Remote OS command injection in AS203038 Looking Glass before 1.3.5 lets remote attackers inject shell commands through the ping/traceroute/BGP diagnostic inputs. The root cause is an unanchored regular expression in the input-validation layer that fails to bind matching to the full input, allowing malicious payloads to slip past validation and reach an underlying command. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reach to the Looking Glass diagnostic interface (gRPC/ConnectRPC API, SvelteKit web UI, or lg-cli endpoint) on a version prior to 1.3.5, and the ability to submit a ping/traceroute/BGP lookup request. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, score 9.8) describes a network-reachable, unauthenticated, low-complexity flaw with full CIA impact - consistent with command injection on a host that fronts routers. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: upgrade to Looking Glass 1.3.5, which corrects the unanchored regular expression in the input-validation layer (advisory GHSA-8hgf-p844-425m; release https://github.com/AS203038/looking-glass/releases/tag/1.3.5). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all Looking Glass instances and identify which are accessible from untrusted networks or the public internet. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today