Skip to content
OpenAdvisories

Package · Go

github.com/OliveTin/OliveTin

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-53541

    OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

    OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 4.3
    CVE-2026-67439

    OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

    OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/api/api.go StartActionAndWait and StartActionByGetAndWait endpoints return full LogEntry output after execution without enforcing…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 6.6
    CVE-2026-67438

    OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check

    OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/executor/arguments.go checkShellArgumentSafety function does not treat regex: custom argument types as unsafe for Shell mode actions, …

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium —
    GHSA-xx6g-43w2-9g6g

    OliveTin's email argument makes compliance harder, enables log injection

    ### Summary The typeSafetyCheckEmail() function in service/internal/executor/arguments.go calls log.Errorf() on every invocation including when validation succeeds (err == nil). This means every email address submitted by any user is written to the applicatio…

    github.com/OliveTin/OliveTin Go
  • Medium 6.5
    CVE-2026-30233

    OliveTin: View permission not being checked when returning dashboards

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpo…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 5.4
    CVE-2026-30224

    OliveTin: Session Fixation - Logout Fails to Invalidate Server-Side Session

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, OliveTin does not revoke server-side sessions when a user logs out. Although the browser cookie is cleared, the corresponding session remains valid in server …

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Medium 5.3
    GHSA-fwhj-785h-43hh

    OliveTin has crash on NPE by calling APIs with invalid bindings or log references

    ### Summary An unauthenticated attacker can trigger server-side panics by first creating an execution log entry with a nil binding via `StartActionByGet` (invalid action ID), then calling `KillAction` or `RestartAction` on that tracking ID. This causes a nil-…

    github.com/OliveTin/OliveTin Go
  • Medium 6.5
    CVE-2025-50946 Public exploit

    OliveTin OS Command Injection vulnerability

    OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

    github.com/OliveTin/OliveTin Go