Skip to content
OpenAdvisories

Vendor

Atheos

3 known vulnerabilities.

Products

Atheos 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-49008

    Atheos Improper Input Validation Vulnerability Enables RCE in Common.php

    Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of `escapeshellcmd()` in `/components/codegit/traits/execute.php` allows argument injection, leading to arbitrary command execution. Atheos ad…

    Atheos Atheos
  • Critical 9.4
    CVE-2025-47788

    Missing Path Validation Enables Path Traversal in Controller.php

    Atheos is a self-hosted browser-based cloud IDE. Prior to v602, similar to GHSA-rgjm-6p59-537v/CVE-2025-22152, the `$target` parameter in `/controller.php` was not properly validated, which could allow an attacker to execute arbitrary files on the server via …

    Atheos Atheos
  • Critical 9.4
    CVE-2025-22152

    Improper Path Validation Enables Path Traversal in Multiple Components in Atheos

    Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly validated across multiple components, allowing an attacker to read, modify, or execute arbitrary files on the server. These vulnerabilities can b…

    Atheos Atheos