Skip to content
OpenAdvisories

Vendor

DIRACGrid

6 known vulnerabilities.

Products

DIRAC 5 diracx-web 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-61667

    DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetM…

    DIRACGrid DIRAC dirac PyPI
  • Critical 9.9
    CVE-2026-45579

    DIRAC: RCE in RequestManager due to eval on untrusted input

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, the RequestManagementSystem/Service/ReqManagerHandler.py export_getRequestCountersWeb function passes an authenticated caller-controll…

    DIRACGrid DIRAC dirac PyPI
  • Critical 9.1
    CVE-2024-24825

    TokenManager not checking permissions on cached tokens in DIRAC

    DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advis…

    DIRACGrid DIRAC dirac PyPI