CVE-2026-66148
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.
Risk Assessment
The risk includes local privilege escalation to full system control, potentially leading to integrity, confidentiality, and availability breaches. An attacker could install malware or steal data.
Recommendation
It is recommended to immediately upgrade GMS CLI to the latest patched version. Also restrict CLI access to trusted users and monitor logs for suspicious activity.
Original NVD description (English source)
An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.