Spree Commerce is vulnerable to RCE through Search API

🗓️ 20 Aug 2025 18:30:21Reported by GitHub Advisory DatabaseType

Spree Commerce before 0.50.x allows remote command execution via the search API using instance_eval.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2011-10026	20 Aug 202515:41	–	attackerkb
Circl	CVE-2011-10026	29 May 201815:50	–	circl
CNNVD	Spree Commerce 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2011-10026	20 Aug 202515:41	–	cve
Cvelist	CVE-2011-10026 Spreecommerce < 0.50.x API RCE	20 Aug 202515:41	–	cvelist
EUVD	EUVD-2011-5250	7 Oct 202500:30	–	euvd
NVD	CVE-2011-10026	20 Aug 202516:15	–	nvd
OSV	GHSA-X485-RHG3-CQR4 Spree Commerce is vulnerable to RCE through Search API	20 Aug 202518:30	–	osv
Positive Technologies	PT-2025-34107 · Undefined · Undefined	20 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2011-10026	22 Aug 202516:35	–	redhatcve

Vulners

Node

rd_searchlogicRange≤3.0.1rubygems

spreecommerce spreeRange0.30.0.beta1–0.50.0rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-10026
github	www.github.com/spree
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/spree_searchlogic_exec.rb
web	www.web.archive.org/web/20111120023342/http://spreecommerce.com/blog/2011/04/19/security-fixes
exploit-db	www.exploit-db.com/exploits/17199
vulncheck	www.vulncheck.com/advisories/spreecommerce-api-rce
github	www.github.com/spree/spree/commit/0a9a360c590829d8a377ceae0cf997bbbbcc2df4
github	www.github.com/spree/spree/commit/3b559e7219f3681184be409ad00cd34a34a37978
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rd_searchlogic/CVE-2011-10026.yml
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/spree/CVE-2011-10026.yml

01 Dec 2025 16:04Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8

CVSS 49.3

EPSS0.68643

SSVC