Skip to content
OpenAdvisories

Package · Go

github.com/OliveTin/OliveTin

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Critical 10.0
    CVE-2026-27626 Public exploit

    OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

    OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) blocks several dangerous argument types but not `password`. A user supplying a …

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 6.5
    CVE-2025-50946 Public exploit

    OliveTin OS Command Injection vulnerability

    OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

    github.com/OliveTin/OliveTin Go