https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T23:54:42.906309+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-106056 CVE-2026-106056 — Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting 2026-10-07T23:54:42.908081+00:00

Affected: rundeck

Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafted option values. Attackers can inject cmd.exe metacharacters such as && or | into free-text options, which CLIUtils.quoteWindowsCMDArg wraps in ineffective single quotes, running commands with node executor credential privileges.