Skip to content
OpenAdvisories

Package · Go

github.com/OliveTin/OliveTin

19 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

  • Medium 6.5
    CVE-2025-50946 Public exploit

    OliveTin OS Command Injection vulnerability

    OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.