https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T16:55:43.367852+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-198719 EUVD-2026-198719 2026-10-23T16:55:43.429434+00:00 EUVD-2026-198719 https://cve.radiocsirt.org/vuln/fkie_cve-2024-46977 fkie_cve-2024-46977 2026-10-23T16:55:43.429473+00:00

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's open_local_file method allows an authenticated user with adequate permissions to download any .txt via the ScreensController#show on the web server COSMOS is running on (depending on the file permissions). This vulnerability is fixed in 5.19.0.

 https://cve.radiocsirt.org/vuln/ghsa-8jxr-mccc-mwg8 GHSA-8jxr-mccc-mwg8 — OpenC3 Path Traversal via screen controller (`GHSL-2024-127`) 2026-10-23T16:55:43.429509+00:00

Affected: RubyGems: openc3, PyPI: openc3

### Summary A path traversal vulnerability inside of `LocalMode`'s `open_local_file` method allows an authenticated user with adequate permissions to download any `.txt` via the `ScreensController#show` on the web server COSMOS is running on (depending on the file permissions).

Note: This CVE affects all OpenC3 COSMOS Editions

### Impact This issue may lead to Information Disclosure.

 https://cve.radiocsirt.org/vuln/pysec-2024-101 PYSEC-2024-101 2026-10-23T16:55:43.429540+00:00

Affected: PyPI: openc3

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. A path traversal vulnerability inside of LocalMode's open_local_file method allows an authenticated user with adequate permissions to download any .txt via the ScreensController#show on the web server COSMOS is running on (depending on the file permissions). This vulnerability is fixed in 5.19.0.