CVE-2025-49008

Atheos is a self-hosted browser-based cloud integrated development environment. Prior to version 6.0.4, improper use of "escapeshellcmd" in "/components/codegit/traits/execute.php" allows argument injection, leading to arbitrary command execution. Atheos administrators and users of vulnerable...