CVE-2021-32826: Remote code execution in Proxyee-Down

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-08-16 · updated 2026-06-17
Weakness: CWE-78

Description

Proxyee-Down is open source proxy software. An attacker being able to provide an extension script (eg: through a MiTM attack or by hosting a malicious extension) may be able to run arbitrary commands on the system running Proxyee-Down. For more details including a PoC see the referenced GHSL-2021-053. As of the writing of this CVE there is currently no patched version.

Affected products

proxyee-down-org proxyee-down: all versions

References

https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/
https://securitylab.github.com/advisories/GHSL-2021-053-proxyee-down/

Get alerted when CVE-2021-32826 or the next vulnerability affects your stack