CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like pepper_name containing shell commands that execute when users copy the printed CLI block into a shell. - 漏洞详情

漏洞编号：CVE-2026-81698

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-81698

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-78

发布/更新时间：2026-08-27 / 2026-08-27

漏洞描述

openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like pepper_name containing shell commands that execute when users copy the printed CLI block into a shell.

漏洞描述

相关链接

相关漏洞