Threats tagged 'ghsa-hxjr-x98w-qvf8'

CVE-2026-112182 is an authorization vulnerability in OpenKM Community Edition affecting the management of workflow definitions. The REST endpoints registerProcessDefinition and runProcessDefinition require authentication but fail to verify user roles properly. This allows an attacker with a ROLE_USER privilege to register and execute process definitions containing BeanShell scripts, enabling execution of arbitrary Java code and operating system commands with the service's privileges. In the official Docker image, the process runs as root, increasing potential impact.