Skip to content
OpenAdvisories

Vendor

OliveTin

16 known vulnerabilities.

Products

OliveTin 16
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-30225 Public exploit

    OliveTin: RestartAction always runs actions as guest

    OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authentication context confusion vulnerability in RestartAction allows a low‑privileged authenticated user to execute actions they are not permitted to run…

    OliveTin OliveTin github.com/OliveTin/OliveTin Go
  • Critical 10.0
    CVE-2026-27626 Public exploit

    OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks

    OliveTin gives access to predefined shell commands from a web interface. In versions up to and including 3000.10.0, OliveTin's shell mode safety check (`checkShellArgumentSafety`) blocks several dangerous argument types but not `password`. A user supplying a …

    OliveTin OliveTin github.com/OliveTin/OliveTin Go