Skip to content
OpenAdvisories

Product · Perforce

Puppet Enterprise

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-85979

    Command Injection in Puppet Enterprise

    Affected versions of Puppet Enterprise contain a command injection vulnerability. An authenticated user with Puppet administrative privileges can inject arbitrary shell commands by providing a specially crafted value for this parameter, which is passed to a s…

    Perforce Puppet Enterprise puppetserver Ubuntu
  • High 8.6
    CVE-2025-5459

    OS Command Injection

    A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in vers…

    Perforce Puppet Enterprise