Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

rundeck — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in rundeck, with AI-generated Chinese analysis, references, and POCs.

Vendor: rundeck

CVE ID Title CVSS Severity Published
CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting CWE-78 7.5 High 2026-10-07
CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source CWE-22 6.5 Medium 2026-10-06
CVE-2026-92763 Rundeck through 6.2.1 Authorization Bypass via Project Import CWE-862 8.1 High 2026-09-16
CVE-2023-47112 Authenticated users can view job names and groups they do not have authorization to view in Rundeck CWE-862 4.3 Medium 2023-11-16
CVE-2023-48222 Authenticated users can view or delete jobs they do not have authorization for in Rundeck CWE-862 8.1 High 2023-11-16
CVE-2022-31044 Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation CWE-256 7.5 High 2022-06-15
CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise CWE-321 9.1 Critical 2022-05-20
CVE-2021-41112 Missing Authorization in Rundeck CWE-862 8.1 High 2022-02-28
CVE-2021-41111 Authorization Bypass Through User-Controlled Key in Rundeck CWE-639 6.4 Medium 2022-02-28
CVE-2021-39133 Cross-Site Request Forgery (CSRF) can run untrusted code on Rundeck server CWE-352 7.2 High 2021-08-30
CVE-2021-39132 YAML deserialization can run untrusted code CWE-502 8.8 High 2021-08-30
CVE-2020-11009 IDOR can reveal execution data and logs to unauthorized user in Rundeck CWE-200 6.5 Medium 2020-04-29

All 12 known CVE vulnerabilities affecting rundeck with full Chinese analysis, references, and POCs where available.