vulncheck.com: VulnCheck Advisory: LibreNMS before 26.5.0 Remote Code Execution via AboutController external site

Back www.vulncheck.com

vulncheck.com: VulnCheck Advisory: LibreNMS before 26.5.0 Remote Code Execution via AboutController external site

www.vulncheck.com • September 1, 2026

Share: View original

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

GitHub Security Advisory (GHSA-jf24-8g2h-2wg7)

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerabilities in n8n and LibreNMS Disclosed Recent advisories from VulnCheck detail critical remote code execution vulnerabilities affecting n8n versions before 1.123.73 and LibreNMS versions before 26.5.0. The n8n vulnerability, categorized as CWE-78, allows attackers to execute arbitrary code via the Git Node. Similarly, the LibreNMS vulnerability, classified as CWE-77, enables remote code execution through the AboutController. Both vulnerabilities pose significant risks to users of these platforms, with potential for exploitation if not addressed. The advisories recommend immediate action to mitigate these risks. No specific exploitation in the wild was reported at the time of publication, but the vulnerabilities are serious enough to warrant urgent attention. 57

Extracted Entities

Attack Types (1)

Remote Code Execution

CWE Weaknesses (1)

CWE-77 - Command Injection

Domains (1)

MITRE ATT&CK (1)

T1059 - Command and Scripting Interpreter