Description
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
High · 7.8
CVE-2026-67961
EUVD-2026-60547GHSA-8h87-jxwq-c68v
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
Published Aug 17, 2026 · Updated Aug 18, 2026 · Assigned by mitre