Threats tagged 'ghsa-q3x8-9859-gj9r'

OPNsense versions before 26.7.8 have a command injection vulnerability that allows authenticated users with System: Firmware privileges to execute arbitrary commands as root. This is achieved by submitting a malicious firmware mirror URL via the API endpoint /api/core/firmware/set, which is evaluated unsafely. The vulnerability also enables attackers to disable package signature verification through sed injection.