CVE-2026-123025

LOWCVSS 9.4 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client plugin through 4.17. The DnsGcloud::prepare() method decodes the dns_gcloud_key model field and directly interpolates the string fields gcloud_account and gcloud_project into a shell command passed to proc_open() via LeUtils::run_shell_command() without any validation or escaping. A remote authenticated user with privileges to issue or renew certificates through the WebGUI/API can achieve arbitrary code execution as root.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://github.com/opnsense/plugins/pull/5873

Weakness type (CWE)

CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Referenced assets3 URLs

By indicator

Full discourse3 posts

Nico Arias@ariasnico17h
@tasarren vi este csv y me acorde de vos: https://vulnradar.munalabs.eu/cve?cve=CVE-2026-123025
1001035
256 followersView on X
cve.now@cvedotnow18h
🆕 New CVE OPNsense os-acme-client: OS command injection in Google Cloud DNS validation module (CVE-2026-123025) An attacker with low-privilege login who can manage certificates can run arbitrary commands as root. No patch listed yet https://cve.now/CVE-2026-123025?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical
00001806
21.7K followersView on X
AgentPrime@agentprime_io18h
🔴 OS command injection in OPNsense os-acme-client (CVE-2026-123025) No fix listed yet https://agentprime.io/advisories/CVE-2026-123025/
0000028
1 followersView on X

Explore more

Back to dashboard