What’s Vulnerable › Products

DIRACGrid DIRAC vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your DIRACGrid DIRAC version is affected

Latest DIRACGrid DIRAC vulnerabilities

• CVE-2026-61668 — DIRAC: Pilot code downloaded over unverified HTTPS connection (CVSS 8.1)
• CVE-2026-61667 — DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval (CVSS 9.9)
• CVE-2026-45579 — DIRAC: RCE in RequestManager due to eval on untrusted input (CVSS 9.9)
• CVE-2024-29905 — DIRAC: Unauthorized users can read proxy contents during generation (CVSS 5.5)
• CVE-2024-24825 — TokenManager not checking permissions on cached tokens in DIRAC (CVSS 7.5)