OliveTin vulnerabilities

Newest CVEs

• CVE-2026-53541

  OliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering

  OliveTin · OliveTin

  Medium4.3
• CVE-2026-67439

  OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output

  OliveTin · OliveTin

  Medium4.3
• CVE-2026-67438

  OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check

  OliveTin · OliveTin

  Medium6.6
• CVE-2026-67437

  OliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)

  OliveTin · OliveTin

  High7.5
• CVE-2026-48709

  OliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument Enumeration

  OliveTin · OliveTin

  Low3.7
• CVE-2026-48708

  OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination

  OliveTin · OliveTin

  High7.5
• CVE-2026-32102

  OliveTin Unauthorized Action Output Disclosure via EventStream

  OliveTin · OliveTin

  High7.1
• CVE-2026-31817

  OliveTin's unsafe parsing of UniqueTrackingId can be used to write files

  OliveTin · OliveTin

  High8.5
• CVE-2026-30233

  OliveTin: View permission not being checked when returning dashboards

  OliveTin · OliveTin

  Medium6.5
• CVE-2026-30225

  OliveTin: RestartAction always runs actions as guest

  OliveTin · OliveTin

  Medium5.3