Skip to content
OpenAdvisories

Product · Shopify

tophat

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-39862

    Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link

    Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c executi…

    Shopify tophat
  • Medium 4.3
    CVE-2024-45036

    Improper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat Link

    Tophat is a mobile applications testing harness. An Improper Access Control vulnerability can expose the `TOPHAT_APP_TOKEN` token stored in `~/.tophatrc` through use of a malicious Tophat URL controlled by the attacker. The vulnerability allows Tophat to send…

    Shopify tophat