CVE-2026-52102

CriticalCVSS 9.8

Published: 03/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 04/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

46th percentile - higher than 46% of all known CVEs

Summary

An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.

Risk Assessment

An attacker can gain full root control over the system, leading to complete compromise of the server and data.

Recommendation

It is recommended to immediately update the openmediavault-md plugin to a version containing a fix and avoid using unsanitized input.

Original NVD description (English source)

An OS command injection vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as root via injecting shell metacharacters.