CVE-2026-33050

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands o...

EUVD-2026-118477

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands o...

CVE-2026-33050 GeoNode: OS command injection via uploaded file layer name

GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. Prior to 5.1.0, a crafted vector file layer name supplied during upload allows a low-privileged remote user to inject shell syntax and execute arbitrary operating-system commands o...

CVE-2026-33050

Prior to version 5.1.0 , GeoNode , a geospatial content management system, is vulnerable to OS command injection . A low-privileged remote user can execute arbitrary operating-system commands by uploading a vector file containing a crafted layer name that injects shell syntax. This vulnerability ...