Skip to content
OpenAdvisories

Product · dromara

mayfly-go

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-92993

    Dromara mayfly-go Machine Script Feature machine_script.go RunMachineScript os command injection

    A vulnerability was detected in Dromara mayfly-go up to 1.11.5. The impacted element is the function RunMachineScript of the file server/internal/machine/api/machine_script.go of the component Machine Script Feature. The manipulation of the argument params re…

    dromara mayfly-go
  • Medium 6.3
    CVE-2026-92992

    Dromara mayfly-go AI Assistant ai.go authorization

    A security vulnerability has been detected in Dromara mayfly-go up to 1.11.5. The affected element is an unknown function of the file server/internal/ai/api/ai.go of the component AI Assistant. The manipulation leads to missing authorization. Remote exploitat…

    dromara mayfly-go