Skip to content
OpenAdvisories

Package · Go

github.com/shellhub-io/shellhub

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.5
    CVE-2026-44423

    ShellHub: Cross-tenant IDOR in `GET /api/sessions/:uid` discloses SSH session data

    ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/sessions/:uid returns the full session object for any authenticated caller, without scoping by the caller's tenant. An authenticated user can read session records (SSH username, device UID, remo…

    shellhub-io shellhub github.com/shellhub-io/shellhub Go
  • Medium 6.5
    CVE-2026-44424

    ShellHub: Cross-tenant IDOR in `GET /api/devices/:uid` discloses device data of any namespace

    ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/devices/:uid returns the full device object whenever the caller is authenticated, without verifying that the device belongs to the caller's namespace (tenant). Any authenticated user (JWT or API…

    shellhub-io shellhub github.com/shellhub-io/shellhub Go
  • Medium 6.5
    CVE-2026-44426

    ShellHub: Cross-tenant IDOR in `GET /api/namespaces/:tenant` via API Key bypasses membership check

    ShellHub is a centralized SSH gateway. Prior to 0.24.2, GET /api/namespaces/:tenant returns the full namespace object — including the members list (user IDs, e-mails, roles), settings, and device counts — to any caller authenticated by an API Key, for any ten…

    shellhub-io shellhub github.com/shellhub-io/shellhub Go
  • Medium 5.4
    CVE-2026-44425

    ShellHub: Crash-DoS via field injection in filter and sort-by parameters

    ShellHub is a centralized SSH gateway. Prior to 0.24.2, the device list endpoint accepts user-controlled identifiers in the the name field of each filter property in the base64-encoded filter query parameter and the sort_by query parameter, which are then pas…

    shellhub-io shellhub github.com/shellhub-io/shellhub Go