OpenC3 cosmos vulnerabilities

19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Latest OpenC3 cosmos vulnerabilities

CVE-2026-77602 — OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites) (CVSS 9.9)
CVE-2026-77601 — OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting (CVSS 8.8)
CVE-2026-77394 — OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget (CVSS 7.6)
CVE-2026-42088 — OpenC3 COSMOS: Administrative Actions via the Script Runner Tool (CVSS 8.1)
CVE-2026-42087 — OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base (CVSS 9.6)
CVE-2026-42086 — OpenC3 COSMOS: Self-XSS in the Command Sender (CVSS 4.6)
CVE-2026-42085 — OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames (CVSS 4.3)
CVE-2026-42084 — OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence (CVSS 8.1)
CVE-2025-68271 — Unauthenticated Remote Code Execution in openc3-api (CVSS 10.0)
CVE-2025-28389 — (CVSS 9.8)
CVE-2025-28388 — (CVSS 9.8)
CVE-2025-28386 — (CVSS 9.8)
CVE-2025-28384 — (CVSS 9.1)
CVE-2025-28382 — (CVSS 7.5)
CVE-2025-28381 — (CVSS 7.5)
CVE-2025-28380 — (CVSS 6.1)
CVE-2024-47529 — OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`) (CVSS 6.5)
CVE-2024-46977 — OpenC3 COSMOS allows a path traversal via screen controller (`GHSL-2024-127`) (CVSS 6.5)
CVE-2024-43795 — OpenC3 COSMOS vulnerable to cross-site scripting in Login functionality (`GHSL-2024-128`) (CVSS 6.1)