Skip to content
OpenAdvisories

Product · semaphoreui

Semaphore UI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-112305

    Semaphore UI through 2.19.16 RCE via Task Environment Ansible Variable Override

    Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables by supplying arbitrary keys in the task environment JSON. Attackers can POST tasks setting ansible_…

    semaphoreui Semaphore UI