UBUNTU-CVE-2026-53448
Coturn versions prior to 4.12.0 contain a SQL injection vulnerability in the HTTPS admin panel. The admin panel passes HTTP query parameters directly into SQL queries without proper sanitization, allowing an authenticated admin to inject arbitrary SQL commands. This can lead to full database control and potentially OS-level access via PostgreSQL COPY TO PROGRAM. The vulnerability is fixed in version 4.12.0.
AI Analysis
Technical Summary
Coturn, an open source TURN and STUN server, has a SQL injection vulnerability in its HTTPS admin panel in versions prior to 4.12.0. The issue arises because HTTP query parameters (du, ds, dip) are interpolated into SQL queries using snprintf without sanitization, and the is_secure_string filter is not applied to these admin panel operations. An authenticated admin can exploit this to execute arbitrary SQL commands, gaining full control over the database and potentially executing OS-level commands via PostgreSQL's COPY TO PROGRAM feature. This vulnerability is resolved in Coturn version 4.12.0.
Potential Impact
An authenticated administrator can exploit this vulnerability to perform SQL injection attacks on the Coturn database, leading to full database compromise. Additionally, the attacker may achieve OS-level command execution through PostgreSQL's COPY TO PROGRAM functionality, significantly escalating the impact beyond database access.
Mitigation Recommendations
This vulnerability is fixed in Coturn version 4.12.0. Users should upgrade to version 4.12.0 or later to remediate this issue. No other mitigations are indicated by the vendor advisory.
UBUNTU-CVE-2026-53448
Description
Coturn versions prior to 4.12.0 contain a SQL injection vulnerability in the HTTPS admin panel. The admin panel passes HTTP query parameters directly into SQL queries without proper sanitization, allowing an authenticated admin to inject arbitrary SQL commands. This can lead to full database control and potentially OS-level access via PostgreSQL COPY TO PROGRAM. The vulnerability is fixed in version 4.12.0.
CVSS v3.1
Score 7.2high
Affected software
pkg:deb/ubuntu/[email protected]?arch=source&distro=xenialpkg:deb/ubuntu/[email protected]?arch=source&distro=bionicpkg:deb/ubuntu/[email protected]?arch=source&distro=focalpkg:deb/ubuntu/[email protected]~ubuntu22.04.1?arch=source&distro=jammypkg:deb/ubuntu/[email protected]?arch=source&distro=noblepkg:deb/ubuntu/[email protected]?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Coturn, an open source TURN and STUN server, has a SQL injection vulnerability in its HTTPS admin panel in versions prior to 4.12.0. The issue arises because HTTP query parameters (du, ds, dip) are interpolated into SQL queries using snprintf without sanitization, and the is_secure_string filter is not applied to these admin panel operations. An authenticated admin can exploit this to execute arbitrary SQL commands, gaining full control over the database and potentially executing OS-level commands via PostgreSQL's COPY TO PROGRAM feature. This vulnerability is resolved in Coturn version 4.12.0.
Potential Impact
An authenticated administrator can exploit this vulnerability to perform SQL injection attacks on the Coturn database, leading to full database compromise. Additionally, the attacker may achieve OS-level command execution through PostgreSQL's COPY TO PROGRAM functionality, significantly escalating the impact beyond database access.
Mitigation Recommendations
This vulnerability is fixed in Coturn version 4.12.0. Users should upgrade to version 4.12.0 or later to remediate this issue. No other mitigations are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-53448
- Osv Schema Version
- 1.7.0
- Aliases
- []
- Ecosystems
- ["Ubuntu:16.04:LTS","Ubuntu:18.04:LTS","Ubuntu:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.04:LTS"]
- Database Specific Severity
- null
- Cvss Version
- 3.1
Threat ID: 6a58b47c68715ace43d9e9f1
Added to database: 07/16/2026, 10:37:48 UTC
Last enriched: 07/16/2026, 11:55:13 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.