01 Record

CVE-2026-73841

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

HighPUBLISHEDCNA: GitHub_M

Base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

02 Description

OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints

Published: 2026-08-13 21:56Z20 HR AGO
Last updated: 2026-08-14 16:10Z2 HR AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 8.8)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-639 CWE-863
SSVC decision: ExploitationnoneAutomatablenoTechnical Impacttotal
Data version: 5.2
Document digest: bc9a3fc051870260f5eb9764800bb377017fabcb2d38244fa0f198e5d7f697da

VendorProductVersionsPlatforms

openchoreoopenchoreo>= 1.2.0-rc.1, < 1.2.0—