https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:40:36.582820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-35459 CVE-2020-35459 2026-10-03T01:40:36.614196+00:00

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.

 https://cve.radiocsirt.org/vuln/ghsa-99xx-83jm-h24m GHSA-99xx-83jm-h24m — ClusterLabs crmsh vulnerable to shell code injection 2026-10-03T01:40:36.614248+00:00

Affected: PyPI: crmsh

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call `crm history` (when `crm` is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.