CVE-2026-42785 is a remote code execution vulnerability in OpenKM Community Edition 6.3.12. It arises from improper control over code generation, allowing authenticated administrators to execute arbitrary Java or BeanShell code through the /admin/Scripting endpoint by leveraging the action=Evaluate parameter. This enables execution of operating system commands on the server hosting the OpenKM application, posing a significant security risk. The vulnerability has a CVSS 4.0 base score of 8.6, indicating high severity. No vendor advisory or patch information is currently available.

An attacker with authenticated administrator access can execute arbitrary code on the OpenKM server, potentially leading to full system compromise, data breach, or disruption of service. The vulnerability enables execution of operating system commands, which can be leveraged to escalate privileges, move laterally, or exfiltrate sensitive information. Since it requires administrator privileges, exploitation is limited to trusted users or attackers who have already compromised an admin account.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict administrator access to trusted personnel only and monitor for suspicious activity related to the /admin/Scripting endpoint. Avoid exposing the administrative interface to untrusted networks. Implement strong authentication and access controls to reduce the risk of credential compromise.