Threats affecting pkg:github/eclipse-che/che-machine-exec

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-114278Eclipse Che · OS Command Injection Critical9.82026-10-28CVE Database V5CVE-2026-114278 CVE-2026-114278 is a critical OS command injection vulnerability in Eclipse Che's che-machine-exec service. The service improperly concatenates user input from JSON endpoints into shell commands without escaping, allowing remote attackers to execute arbitrary commands in containers when authentication is disabled (default setting). Vulnerability Eclipse Foundation CWE-78	CVE Database V5	2026-10-28

Page 1 of 1