What’s Vulnerable › Vulnerabilities

CVE-2025-50946

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-08-13 · updated 2026-06-17
• Weakness: CWE-78

Description

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

Affected products

• OliveTin: 2025.4.22

References

• https://github.com/OliveTin/OliveTin
• https://github.com/OliveTin/OliveTin/blob/8c073bf45fca6c6eda4e8a9feb182433277343ee/service/internal/executor/arguments.go#L211
• https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-50946/CVE-2025-50946.md

Get alerted when CVE-2025-50946 or the next vulnerability affects your stack