OS Command Injection

github.com/chaos-mesh/chaos-mesh is vulnerable to OS command Injection. The vulnerability is due to unsanitized input handling in the cleanTcs mutation due to user-controlled fields being passed to operating-system command execution without proper validation. An attacker can use this to perform...

EUVD-2025-29176

Malicious code in bioql PyPI...

SUSE CVE-2025-59359

The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster...

CVE-2025-59359

The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster...

CVE-2025-59359

The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster...

CVE-2025-59359 OS command injection in Chaos Mesh via the cleanTcs mutation

The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster...

CVE-2025-59359

CVE-2025-59359 concerns the Chaos Controller Manager in Chaos Mesh, where the cleanTcs mutation is vulnerable to OS command injection. This is paired with CVE-2025-59358, which describes an unauthenticated GraphQL debugging server that can kill processes across pods, enabling cluster-wide remote ...

PT-2025-37474

Name of the Vulnerable Software and Affected Versions Chaos Mesh affected versions not specified Description A command injection flaw exists in Chaos Mesh’s cleanTcs mutation. This flaw allows unauthenticated in-cluster attackers to perform remote code execution across the cluster. The...

chaos-mesh 操作系统命令注入漏洞

chaos-mesh is an open source engineering platform from Chaos Mesh. Chaos-mesh suffers from an OS command injection vulnerability that stems from the cleanTcs mutation being susceptible to an OS command injection attack that could lead to remote code execution...