Skip to content
OpenAdvisories

Package · PyPI

openc3

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-42088

    OpenC3 COSMOS: Administrative Actions via the Script Runner Tool

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. Prior to version 7.0.0-rc3, the Script Runner widget allows users to execute Python and Ruby scripts directly from the openc3-COSMOS-script…

    OpenC3 cosmos openc3 openc3 PyPI RubyGems
  • Critical 9.6
    CVE-2026-42087

    OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base

    OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From version 6.7.0 to before version 7.0.0-rc3, a SQL injection vulnerability exists in the Time-Series Database (TSDB) component of COSMOS…

    OpenC3 cosmos openc3 openc3 PyPI RubyGems
  • Critical 9.1
    CVE-2025-28384

    OpenC3 COSMOS Vulnerable to Directory Traversal via /script-api/scripts/ endpoint

    An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory traversal.

    openc3 openc3-cosmos-tool-iframe PyPI RubyGems
  • Critical 9.8
    CVE-2025-28389

    Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

    openc3 PyPI
  • Critical 9.8
    CVE-2025-28388

    OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

    openc3 PyPI
  • Critical 9.8
    CVE-2025-28386

    A remote code execution (RCE) vulnerability in the Plugin Management component of OpenC3 COSMOS v6.0.0 allows attackers…

    openc3 PyPI