{"id":"CVE-2026-118477","published":"2026-10-28T12:17:40.227","lastModified":"2026-10-28T15:24:56.033","description":"The ei_git_repo_url parameter in the Git remote configuration endpoint of KaliFast is vulnerable to OS Command Injection. This OS Command Injection vulnerability allows an authenticated attacker (free registration available) to execute arbitrary commands on the KaliFast server with www-data privileges. Fixed in version 2026061802.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://advisories.orangecyberdefense.com/advisories/166","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The ei_git_repo_url parameter in KaliFast's Git remote configuration endpoint allows authenticated attackers to inject and execute arbitrary OS commands on the server with www-data privileges due to improper input sanitization (CWE-78, OS command injection). This is a critical flaw because it enables full server compromise without requiring admin rights.","exploitability":"Exploitation requires only a valid authenticated session (free registration available), with no additional conditions or complex prerequisites, making it trivial for an attacker to exploit.","blast_radius":"Successful exploitation grants www-data-level access, enabling attackers to read sensitive files, modify system configurations, pivot to other services, and potentially exfiltrate data or deploy persistent backdoors on the host.","remediation":"Upgrade KaliFast to version 2026061802 or later, which contains the vendor-provided fix for this OS command injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["os-command-injection","web","auth-bypass","critical","kali-linux"],"model":"garnet-coder","analyzedAt":"2026-10-29T08:41:44.446Z"}}