Skip to content
OpenAdvisories

Vendor

skyhook-io

1 known vulnerabilities.

Products

radar 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-82026

    Radar < 1.12.2 Missing Authorization via /api/local-terminal

    Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated attackers to spawn a privileged shell by relying only on a runtime-mode check i…

    skyhook-io radar