OliveTin — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in OliveTin, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-32102	OliveTin Unauthorized Action Output Disclosure via EventStream CWE-284	8.8^AI	High^AI	2026-03-11
CVE-2026-31817	OliveTin's unsafe parsing of UniqueTrackingId can be used to write files CWE-22	8.5	High	2026-03-10
CVE-2026-30233	OliveTin: View permission not being checked when returning dashboards CWE-200	6.5	Medium	2026-03-06
CVE-2026-30225	OliveTin: RestartAction always runs actions as guest CWE-441	5.3	Medium	2026-03-06
CVE-2026-30223	OliveTin: JWT Audience Validation Bypass in Local Key and HMAC Modes CWE-287	8.8	High	2026-03-06
CVE-2026-30224	OliveTin: Session Fixation - Logout Fails to Invalidate Server-Side Session CWE-384	5.4	Medium	2026-03-06
CVE-2026-28790	OliveTin: Unauthenticated Action Termination via KillAction When Guests Must Login CWE-284	7.5	High	2026-03-05
CVE-2026-28789	OliveTin: Unauthenticated DoS via concurrent map writes in OAuth2 state handling CWE-362	7.5	High	2026-03-05
CVE-2026-28342	OliveTin: Unauthenticated Denial of Service via Memory Exhaustion in PasswordHash API Endpoint CWE-770	7.5	High	2026-03-05
CVE-2026-27626	OliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks CWE-78	10.0	Critical	2026-02-25

All 10 known CVE vulnerabilities affecting OliveTin with full Chinese analysis, references, and POCs where available.