Description
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions.
Medium · 4.6
CVE-2026-78971
EUVD-2026-74262GHSA-46pq-cq8c-c7p9
In Halo <= 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any co…
Published Sep 8, 2026 · Updated Sep 14, 2026 · Assigned by mitre