{"vulnerability": "CVE-2026-108553", "sightings": [{"uuid": "8408c375-4293-47d7-913c-bc2bd047b8c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108553", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417182801773432", "content": "CVE-2026-108553 OpenRefine through 3.10.1 CSRF to RCE via get-rows Command OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating system commands as the OpenRefine user.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108553https://github.com/OpenRefine/OpenRefine/issues/7999https://github.com/OpenRefine/OpenRefinehttps://github.com/OpenRefine/OpenRefine/blob/bde8a36dc188f7846aeafc2910969e7d0fbc8e7c/main/src/com/google/refine/commands/row/GetRowsCommand.java#L174-L186https://github.com/OpenRefine/OpenRefine/blob/bde8a36dc188f7846aeafc2910969e7d0fbc8e7c/modules/core/src/main/java/com/google/refine/browsing/facets/ListFacet.java#L327-L339https://github.com/OpenRefine/OpenRefine/blob/bde8a36dc188f7846aeafc2910969e7d0fbc8e7c/extensions/jython/src/com/google/refine/jython/JythonEvaluable.java#L142https://www.vulncheck.com/advisories/openrefine-through-3.10.1-csrf-to-rce-via-get-rows-command#OpenRefine#CVE_2026_108553#bot", "creation_timestamp": "2026-10-10T14:53:45.199296Z"}, {"uuid": "fa04b1a3-bccf-49e2-a02b-5d79944a0b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108553", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk26rpptw2e", "content": "\ud83d\udfe0 CVE-2026-108553 - High (7.5)\n\nOpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows com...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108553/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T17:45:57.963045Z"}, {"uuid": "260a49db-b308-4280-851d-e3c686ee7f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108553", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxl3f6bpos22", "content": "CVE-2026-108553 - openrefine\nThe OpenRefine tool (versions up to 3.10.1) can be tricked into running system commands if a logged\u2011in user clicks a specially crafted link on another website. An attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openrefine #Debian12 #CVE #infosec", "creation_timestamp": "2026-10-11T03:40:05.118373Z"}]}